--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49598","PortSpecifier":{"PortValue":49598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49598","PortSpecifier":{"PortValue":49598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832351,"nanos":565261449},"http":{"id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/auth-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d50ec5-c8c4-49a0-bb69-f3a61657d6ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39674","PortSpecifier":{"PortValue":39674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39674","PortSpecifier":{"PortValue":39674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832351,"nanos":601047071},"http":{"id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/auth-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b2eb6c-b080-4964-ad30-c4fba444ece8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49608","PortSpecifier":{"PortValue":49608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86e64525-9809-41ab-b4c8-fd778552d31a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49608","PortSpecifier":{"PortValue":49608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832351,"nanos":642613502},"http":{"id":"86e64525-9809-41ab-b4c8-fd778552d31a","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/auth-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86e64525-9809-41ab-b4c8-fd778552d31a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39682","PortSpecifier":{"PortValue":39682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39682","PortSpecifier":{"PortValue":39682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832351,"nanos":681774791},"http":{"id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/auth-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e13f42a3-e3e2-4713-b8f8-770ac6ab3941","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"info","ts":"2026-07-23T18:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:45:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"error","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50392","PortSpecifier":{"PortValue":50392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50392","PortSpecifier":{"PortValue":50392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832371,"nanos":119101659},"http":{"id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/auth-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6bc33af-eb27-4bb9-b254-d7e3bb8173af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52476","PortSpecifier":{"PortValue":52476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52476","PortSpecifier":{"PortValue":52476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832371,"nanos":164497127},"http":{"id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/auth-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1502403f-eef5-43b8-b2c9-ab2ab37e716e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52488","PortSpecifier":{"PortValue":52488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","method":"GET","path":"/maas-api/v1/api-keys/e957d1ba-8279-46c7-a08a-37ed3222768b","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52488","PortSpecifier":{"PortValue":52488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832371,"nanos":209115504},"http":{"id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","method":"GET","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e957d1ba-8279-46c7-a08a-37ed3222768b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e957d1ba-8279-46c7-a08a-37ed3222768b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/auth-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60cd7d39-d11b-4b41-8431-38ced55ce4d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50396","PortSpecifier":{"PortValue":50396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","method":"GET","path":"/maas-api/v1/api-keys/e957d1ba-8279-46c7-a08a-37ed3222768b","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50396","PortSpecifier":{"PortValue":50396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832371,"nanos":238393290},"http":{"id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","method":"GET","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e957d1ba-8279-46c7-a08a-37ed3222768b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e957d1ba-8279-46c7-a08a-37ed3222768b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/auth-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:46:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b3025d-bf48-4707-bc21-c34f29ba6fe7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"debug","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"debug","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"error","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"debug","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"error","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"error","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:46:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"debug","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:46:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"info","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52270","PortSpecifier":{"PortValue":52270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52270","PortSpecifier":{"PortValue":52270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832390,"nanos":761618463},"http":{"id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/auth-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"794862be-9cc4-4a0d-b053-9bcea0d3407a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41638","PortSpecifier":{"PortValue":41638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41638","PortSpecifier":{"PortValue":41638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832390,"nanos":823057217},"http":{"id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/auth-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc9c7a28-d1c3-4787-93ba-4f8b3ab033ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52276","PortSpecifier":{"PortValue":52276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ba46444-06ea-4c50-822d-f896565fad4e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52276","PortSpecifier":{"PortValue":52276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832390,"nanos":868400408},"http":{"id":"3ba46444-06ea-4c50-822d-f896565fad4e","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Np55L9jgJDPGH2hW_AXRBIopvVPZXrDLsrvYF2BGYjetA4Nh8jpRR8mfoxdB"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Np55L9jgJDPGH2hW_AXRBIopvVPZXrDLsrvYF2BGYjetA4Nh8jpRR8mfoxdB\"}"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d030b4a-0d62-4b77-b52b-5e9505770fa1","keyName":"e2e-auth-iso-a-869e31","subscription":"e2e-auth-iso-0140a0","tenant":"e2e-shared-a-d87a73","userId":"1d030b4a-0d62-4b77-b52b-5e9505770fa1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/auth-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0140a0"} {"level":"info","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:46:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ba46444-06ea-4c50-822d-f896565fad4e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85ca584ccba04832ac1560dfa02b6b06f16e8da063b403e84440ef9b7dc46797"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59f68c7df6e166a549a8c2e0eb31d2c9caf4a3e9092649fc85857149309cf462"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0da1f0d1fc1bc34c5b5e54c7cbd0f699b915d304d1b7be8b4bcf69f8d98c369"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42593ba461bdc11faa2ccd41987789446150a34fcb6f2458234c8c7ed5cf7f25"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cec32a112d129fa287c2a21f4e1f7da4741eecb85d89f9fb5d9dfd90dc362fe5"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5e1c4fa691ac935fc0fc55729b9431c46ef2e608673ddc00e1f4d2f411edf6"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45e3da2926a934ec4261137a2f10c8ebd2703ce250f2785be9621b60f785932c"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fd6ff86359889541b00292952b8cf24449c41ce6c28160a3ab50b8c9bd52b5a"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ab150f84193deb32933c13ca688289448af5b3d71e2552c81ef99e31802f37"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c0686072f64c5e55b9d99bbb414526bc0f90d759255e280bfcc106b4e6a708b"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8999d9787afce5a47b223286bd7c3e2d586310870feab1c7f19b0e668dca732c"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb9bfac312725eeb4e4451b0edde05ba2b748a86fbe4d6d4cccd0207b9ae5969"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a8802e302d05c031ab8398c638e170565ba2709eed7254e9dd068083b83ab8d"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f1630e033786ca3ff973234b63080c344b574b6e9d1280e69521a7067e74a69"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a21917825a49743f92f481cd1d0e93e2b16d30ee087239f341299e84efc16686"} {"level":"info","ts":"2026-07-23T18:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e7df1f178de120685027bb0cbc9f9b6568cc36a653479ba476a9410cedfcbbf"} {"level":"debug","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"} {"level":"debug","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"} {"level":"debug","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"} {"level":"debug","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"debug","ts":"2026-07-23T18:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33150","PortSpecifier":{"PortValue":33150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19d8dc62-26c0-4052-bcda-cf8f93754729","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33150","PortSpecifier":{"PortValue":33150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832467,"nanos":372228543},"http":{"id":"19d8dc62-26c0-4052-bcda-cf8f93754729","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/sub-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d8dc62-26c0-4052-bcda-cf8f93754729","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56980","PortSpecifier":{"PortValue":56980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56980","PortSpecifier":{"PortValue":56980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832467,"nanos":414098685},"http":{"id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/sub-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bed4e309-402e-4a07-95a2-070ebdfcc0b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33154","PortSpecifier":{"PortValue":33154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33154","PortSpecifier":{"PortValue":33154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832467,"nanos":453062242},"http":{"id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","method":"GET","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GQF7WfBHZ2KI5sx4_8GVH0oTr6RwPGQDRronnNspgvda8j3jGZyik6IkfiB4"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GQF7WfBHZ2KI5sx4_8GVH0oTr6RwPGQDRronnNspgvda8j3jGZyik6IkfiB4\"}"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eebca7d3-6109-4191-a658-386b6ff0c296","keyName":"e2e-sub-iso-fc9846","subscription":"e2e-a-only-bdf608","tenant":"e2e-shared-a-d87a73","userId":"eebca7d3-6109-4191-a658-386b6ff0c296","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/sub-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bdf608"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87ff8c8f-f5a6-4d28-b7b7-25be266087d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56984","PortSpecifier":{"PortValue":56984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44851a34-477a-4c96-a481-c2d51f9eeea5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56984","PortSpecifier":{"PortValue":56984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832467,"nanos":500411459},"http":{"id":"44851a34-477a-4c96-a481-c2d51f9eeea5","method":"GET","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Smiem3alNZh3SMpJ_e7Ar4OLmfn15cRRIe3dSPPMUTsEbXxPK5uPPEPKYrYU"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Smiem3alNZh3SMpJ_e7Ar4OLmfn15cRRIe3dSPPMUTsEbXxPK5uPPEPKYrYU\"}"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"858a038c-03d0-48c8-a4f9-8b336951b7ba","keyName":"e2e-sub-iso-fdef21","subscription":"e2e-b-only-bdf608","tenant":"e2e-shared-b-118a8c","userId":"858a038c-03d0-48c8-a4f9-8b336951b7ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/sub-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bdf608"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44851a34-477a-4c96-a481-c2d51f9eeea5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"} {"level":"info","ts":"2026-07-23T18:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"error","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"} {"level":"error","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"error","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"} {"level":"error","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"error","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"error","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:48:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"error","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43954","PortSpecifier":{"PortValue":43954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a63d5689-d392-4266-a22b-c567ec740fb8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43954","PortSpecifier":{"PortValue":43954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832486,"nanos":353654602},"http":{"id":"a63d5689-d392-4266-a22b-c567ec740fb8","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/sub-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a63d5689-d392-4266-a22b-c567ec740fb8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40736","PortSpecifier":{"PortValue":40736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40736","PortSpecifier":{"PortValue":40736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832486,"nanos":397401849},"http":{"id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/sub-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7229a7b7-9ff4-4076-88d0-bc0cc413a644","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43956","PortSpecifier":{"PortValue":43956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43956","PortSpecifier":{"PortValue":43956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832486,"nanos":440111506},"http":{"id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SxxrVtnKMy9HEEeP_57qusyzTXH7mC9pNaqPCx2UAqdFH2wiINfKe87pRMkP"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SxxrVtnKMy9HEEeP_57qusyzTXH7mC9pNaqPCx2UAqdFH2wiINfKe87pRMkP\"}"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4b855ea3-afcc-4e3c-83b2-47de866a8b55","keyName":"e2e-sub-iso-4ec2e8","subscription":"e2e-shared-sub-8c3b47","tenant":"e2e-shared-a-d87a73","userId":"4b855ea3-afcc-4e3c-83b2-47de866a8b55","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/sub-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8c3b47"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37f6f4ae-41be-442c-b3b7-779ad8f345b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40738","PortSpecifier":{"PortValue":40738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40738","PortSpecifier":{"PortValue":40738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832486,"nanos":475132844},"http":{"id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1hfNQng8vBhAuUZz_BjofKsiqyALdqTLgLEDlXDhqKWYlIYerwwP3ml5jMPf"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1hfNQng8vBhAuUZz_BjofKsiqyALdqTLgLEDlXDhqKWYlIYerwwP3ml5jMPf\"}"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f19c2eb6-a432-400f-9c8b-38bf4a4c53b3","keyName":"e2e-sub-iso-005213","subscription":"e2e-shared-sub-8c3b47","tenant":"e2e-shared-b-118a8c","userId":"f19c2eb6-a432-400f-9c8b-38bf4a4c53b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/sub-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8c3b47"} {"level":"info","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:48:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70d32812-8f63-40ec-bfbc-f4e65e992d4f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3241f2ec0c07e12f32604738f45699d85fbb940ef9d860fcd8578cfc255a625f"} {"level":"info","ts":"2026-07-23T18:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e886638e88a94e87661d8862de96024becc538078b05181e305f6e680d0ea19"} {"level":"info","ts":"2026-07-23T18:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b71899c657a8863d03117962bded5bd472a417c76dc05b944721c4783049cfb8"} {"level":"info","ts":"2026-07-23T18:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"info","ts":"2026-07-23T18:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67d2eb3ec8f1e1e5d83afe83409f7267d4e779ad404e0a9222724a5637e66f2c"} {"level":"info","ts":"2026-07-23T18:48:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"info","ts":"2026-07-23T18:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9482113525f05d585da11008a9d4c04c2e6cd3e71011fe74425326fd1dedd810"} {"level":"info","ts":"2026-07-23T18:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bae311107103e2d2c99a4425fb5f0cba1ff0bf8f35c91c0b7b8223842d9867d8"} {"level":"info","ts":"2026-07-23T18:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0792420cdec60e502aef974be87d47838b3452b1d5f2af1a9e1d0550c89041f"} {"level":"info","ts":"2026-07-23T18:48:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a91d9355ddd99382e031efbcdfe8c49addb0051ae015684fcda441d3a35b5fd6"} {"level":"info","ts":"2026-07-23T18:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26f2302c9e2a98ea6760244d4bd94f6df3cc7a16ca1f9e63f56ef57cd08e9ff9"} {"level":"info","ts":"2026-07-23T18:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bf62923306bfce8b5b8160cc53f870ba51248a1390ca8283b1e789d8e4943d9"} {"level":"info","ts":"2026-07-23T18:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6109654117997a0cea020daf57f501c6d6fb70b11ea37de8c1c8e4e9e73f13f"} {"level":"info","ts":"2026-07-23T18:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da1de81fd28bcd5e3928bc9be9c14041db0204525467c6c65dfb1cc16ca73e5a"} {"level":"info","ts":"2026-07-23T18:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce761e2ba0c5db8160e5f31e07428b54f52e953a3d26ac520e2b5a503e227bd8"} {"level":"info","ts":"2026-07-23T18:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b72237b6e71112dd09f768a02dab23ac99d5476474242682f23b426f847df7c5"} {"level":"info","ts":"2026-07-23T18:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fddf4d8de0f6babc65e26c70cde46d7d4a3c7b381a4b64036ada8fe9cb4ac1e"} {"level":"info","ts":"2026-07-23T18:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd329e5b5fff51830ad1daed79a7178906789dfbb038e9b7685d0108290a6dd5"} {"level":"debug","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"debug","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"debug","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"debug","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"debug","ts":"2026-07-23T18:49:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afebfb1aba24aa31aee5ff1613b56cd9f16beee9924b953af90c6085146a25f1"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afebfb1aba24aa31aee5ff1613b56cd9f16beee9924b953af90c6085146a25f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afebfb1aba24aa31aee5ff1613b56cd9f16beee9924b953af90c6085146a25f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08cffa9874fe02ed357e7eb65d8e9b7a1401abe31ac5980478c50a5d83f34cf"} {"level":"info","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afebfb1aba24aa31aee5ff1613b56cd9f16beee9924b953af90c6085146a25f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08cffa9874fe02ed357e7eb65d8e9b7a1401abe31ac5980478c50a5d83f34cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f08cffa9874fe02ed357e7eb65d8e9b7a1401abe31ac5980478c50a5d83f34cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08cffa9874fe02ed357e7eb65d8e9b7a1401abe31ac5980478c50a5d83f34cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afebfb1aba24aa31aee5ff1613b56cd9f16beee9924b953af90c6085146a25f1"} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30"} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08cffa9874fe02ed357e7eb65d8e9b7a1401abe31ac5980478c50a5d83f34cf"} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afebfb1aba24aa31aee5ff1613b56cd9f16beee9924b953af90c6085146a25f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08cffa9874fe02ed357e7eb65d8e9b7a1401abe31ac5980478c50a5d83f34cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55924","PortSpecifier":{"PortValue":55924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55924","PortSpecifier":{"PortValue":55924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832558,"nanos":444529381},"http":{"id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"error","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"error","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"} {"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55938","PortSpecifier":{"PortValue":55938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea40809a-de7e-4fb9-87ee-aa727537953b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55938","PortSpecifier":{"PortValue":55938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832567,"nanos":462862579},"http":{"id":"ea40809a-de7e-4fb9-87ee-aa727537953b","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59614","PortSpecifier":{"PortValue":59614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59614","PortSpecifier":{"PortValue":59614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832567,"nanos":511626097},"http":{"id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46cd8446-645f-4e57-adae-12c4753781be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55954","PortSpecifier":{"PortValue":55954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46cd8446-645f-4e57-adae-12c4753781be","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46cd8446-645f-4e57-adae-12c4753781be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55954","PortSpecifier":{"PortValue":55954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832567,"nanos":557732507},"http":{"id":"46cd8446-645f-4e57-adae-12c4753781be","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46cd8446-645f-4e57-adae-12c4753781be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46cd8446-645f-4e57-adae-12c4753781be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46cd8446-645f-4e57-adae-12c4753781be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35130","PortSpecifier":{"PortValue":35130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35130","PortSpecifier":{"PortValue":35130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832568,"nanos":618509053},"http":{"id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffad6ca3-8787-487a-90e4-98c262672324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35136","PortSpecifier":{"PortValue":35136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffad6ca3-8787-487a-90e4-98c262672324","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffad6ca3-8787-487a-90e4-98c262672324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35136","PortSpecifier":{"PortValue":35136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832569,"nanos":659318765},"http":{"id":"ffad6ca3-8787-487a-90e4-98c262672324","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffad6ca3-8787-487a-90e4-98c262672324","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffad6ca3-8787-487a-90e4-98c262672324","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffad6ca3-8787-487a-90e4-98c262672324","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35142","PortSpecifier":{"PortValue":35142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35142","PortSpecifier":{"PortValue":35142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832570,"nanos":693913743},"http":{"id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35148","PortSpecifier":{"PortValue":35148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35148","PortSpecifier":{"PortValue":35148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832571,"nanos":732672593},"http":{"id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35158","PortSpecifier":{"PortValue":35158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35158","PortSpecifier":{"PortValue":35158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832572,"nanos":773672398},"http":{"id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35172","PortSpecifier":{"PortValue":35172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35172","PortSpecifier":{"PortValue":35172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832573,"nanos":814555425},"http":{"id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35184","PortSpecifier":{"PortValue":35184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4d3e955-4341-442b-8538-562b4ea224e5","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35184","PortSpecifier":{"PortValue":35184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832574,"nanos":849668623},"http":{"id":"f4d3e955-4341-442b-8538-562b4ea224e5","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35194","PortSpecifier":{"PortValue":35194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35194","PortSpecifier":{"PortValue":35194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832575,"nanos":884326267},"http":{"id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35210","PortSpecifier":{"PortValue":35210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35210","PortSpecifier":{"PortValue":35210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832576,"nanos":920918600},"http":{"id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40702","PortSpecifier":{"PortValue":40702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26daccb2-59c4-4bee-b206-61e2eec6b317","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40702","PortSpecifier":{"PortValue":40702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832577,"nanos":959990523},"http":{"id":"26daccb2-59c4-4bee-b206-61e2eec6b317","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44218","PortSpecifier":{"PortValue":44218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","method":"POST","path":"/ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c/v1/completions","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44218","PortSpecifier":{"PortValue":44218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832578,"nanos":1968207},"http":{"id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JPklWkrIFgVk6MYg_LoR5mLondmqppuOhrVpDr014HYvqZ32NN1UlW2sX6U0"} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JPklWkrIFgVk6MYg_LoR5mLondmqppuOhrVpDr014HYvqZ32NN1UlW2sX6U0\"}"} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b1108df-3e2c-47cb-918d-d907cf6a63f9","keyName":"e2e-rate-b-79b291","subscription":"e2e-rate-iso-b-79b291","tenant":"e2e-shared-b-118a8c","userId":"9b1108df-3e2c-47cb-918d-d907cf6a63f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c\",\"requestedSubscription\":\"e2e-rate-iso-b-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-118a8c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-79b291","namespace":"ai-tenant-e2e-shared-b-118a8c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c"}} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-79b291"} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9b1108df-3e2c-47cb-918d-d907cf6a63f9","keyName":"e2e-rate-b-79b291","selected_subscription":"e2e-rate-iso-b-79b291","selected_subscription_key":"ai-tenant-e2e-shared-b-118a8c/e2e-rate-iso-b-79b291@ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-118a8c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-79b291","namespace":"ai-tenant-e2e-shared-b-118a8c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f08cffa9874fe02ed357e7eb65d8e9b7a1401abe31ac5980478c50a5d83f34cf"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afebfb1aba24aa31aee5ff1613b56cd9f16beee9924b953af90c6085146a25f1"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"} {"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}