--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-19T15:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"debug","ts":"2026-07-19T15:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"debug","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:40:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46356","PortSpecifier":{"PortValue":46356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58b9455a-c119-4e89-aa98-7dba6241058c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46356","PortSpecifier":{"PortValue":46356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475616,"nanos":89445486},"http":{"id":"58b9455a-c119-4e89-aa98-7dba6241058c","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/auth-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58b9455a-c119-4e89-aa98-7dba6241058c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57226","PortSpecifier":{"PortValue":57226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57226","PortSpecifier":{"PortValue":57226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475616,"nanos":144973987},"http":{"id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/auth-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18a91d10-96f9-43c2-8226-c763ec6f50dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6253c527-93f6-412a-8635-b29d260ca32e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57234","PortSpecifier":{"PortValue":57234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6253c527-93f6-412a-8635-b29d260ca32e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6253c527-93f6-412a-8635-b29d260ca32e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57234","PortSpecifier":{"PortValue":57234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475616,"nanos":187079264},"http":{"id":"6253c527-93f6-412a-8635-b29d260ca32e","method":"GET","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6253c527-93f6-412a-8635-b29d260ca32e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XEpGOzmKF9G3kYzp_X8dTHQkStBEYUWnZBvqyjSMryaNrLdgwpDGQpbwJBpB"} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6253c527-93f6-412a-8635-b29d260ca32e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XEpGOzmKF9G3kYzp_X8dTHQkStBEYUWnZBvqyjSMryaNrLdgwpDGQpbwJBpB\"}"} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6253c527-93f6-412a-8635-b29d260ca32e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6253c527-93f6-412a-8635-b29d260ca32e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6253c527-93f6-412a-8635-b29d260ca32e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6253c527-93f6-412a-8635-b29d260ca32e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6253c527-93f6-412a-8635-b29d260ca32e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-19T15:40:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6253c527-93f6-412a-8635-b29d260ca32e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42176","PortSpecifier":{"PortValue":42176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f96b674-4cec-4546-bf6c-5134497db7a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42176","PortSpecifier":{"PortValue":42176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475639,"nanos":651144465},"http":{"id":"7f96b674-4cec-4546-bf6c-5134497db7a8","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/auth-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f96b674-4cec-4546-bf6c-5134497db7a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45850","PortSpecifier":{"PortValue":45850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45850","PortSpecifier":{"PortValue":45850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475639,"nanos":692816716},"http":{"id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/auth-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef6c77d9-518d-45d6-9e77-cd9040516ca4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"336babb1-8b72-45d9-ab74-f894d386751c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42182","PortSpecifier":{"PortValue":42182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"336babb1-8b72-45d9-ab74-f894d386751c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"336babb1-8b72-45d9-ab74-f894d386751c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42182","PortSpecifier":{"PortValue":42182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475639,"nanos":733211265},"http":{"id":"336babb1-8b72-45d9-ab74-f894d386751c","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"336babb1-8b72-45d9-ab74-f894d386751c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"336babb1-8b72-45d9-ab74-f894d386751c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"336babb1-8b72-45d9-ab74-f894d386751c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336babb1-8b72-45d9-ab74-f894d386751c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336babb1-8b72-45d9-ab74-f894d386751c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336babb1-8b72-45d9-ab74-f894d386751c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/auth-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"336babb1-8b72-45d9-ab74-f894d386751c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"336babb1-8b72-45d9-ab74-f894d386751c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"336babb1-8b72-45d9-ab74-f894d386751c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"336babb1-8b72-45d9-ab74-f894d386751c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"336babb1-8b72-45d9-ab74-f894d386751c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45866","PortSpecifier":{"PortValue":45866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6817dd26-d052-4626-8fb7-526cb072ddcf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45866","PortSpecifier":{"PortValue":45866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475639,"nanos":782408465},"http":{"id":"6817dd26-d052-4626-8fb7-526cb072ddcf","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/auth-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6817dd26-d052-4626-8fb7-526cb072ddcf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"error","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"error","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40796","PortSpecifier":{"PortValue":40796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40796","PortSpecifier":{"PortValue":40796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475656,"nanos":905293154},"http":{"id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/auth-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b032903-b189-4eaf-a2f5-069e8151c3dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35358","PortSpecifier":{"PortValue":35358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35358","PortSpecifier":{"PortValue":35358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475656,"nanos":940186680},"http":{"id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/auth-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b541374-7ce1-4756-a15b-2d3112bb98ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35368","PortSpecifier":{"PortValue":35368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"189ffadb-ff6e-41f5-b234-2018360cc6db","method":"GET","path":"/maas-api/v1/api-keys/288feb3b-bc52-464f-a0f1-a9417a21ea0e","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35368","PortSpecifier":{"PortValue":35368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475656,"nanos":981843075},"http":{"id":"189ffadb-ff6e-41f5-b234-2018360cc6db","method":"GET","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/288feb3b-bc52-464f-a0f1-a9417a21ea0e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/288feb3b-bc52-464f-a0f1-a9417a21ea0e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/auth-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"189ffadb-ff6e-41f5-b234-2018360cc6db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40800","PortSpecifier":{"PortValue":40800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","method":"GET","path":"/maas-api/v1/api-keys/288feb3b-bc52-464f-a0f1-a9417a21ea0e","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40800","PortSpecifier":{"PortValue":40800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475657,"nanos":19361110},"http":{"id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","method":"GET","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/288feb3b-bc52-464f-a0f1-a9417a21ea0e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/288feb3b-bc52-464f-a0f1-a9417a21ea0e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/auth-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:40:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49ea3e0e-1aed-481a-b972-18b03dd0b10f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:41:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:41:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:41:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:41:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:41:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:41:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"error","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51682","PortSpecifier":{"PortValue":51682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51682","PortSpecifier":{"PortValue":51682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475676,"nanos":244065179},"http":{"id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/auth-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"030e30e1-f8d6-4cbb-a008-8db40e0a5ae0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38542","PortSpecifier":{"PortValue":38542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38542","PortSpecifier":{"PortValue":38542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475676,"nanos":284197696},"http":{"id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/auth-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e4953e3-b488-4fa4-93f2-5f62b88c2d74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51698","PortSpecifier":{"PortValue":51698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51698","PortSpecifier":{"PortValue":51698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475676,"nanos":329387044},"http":{"id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9hENjPHrqsvSJcOa_u7nZiX722OqaMbjtGxPvLC8kGnNhAfIwUKRL9NtNBsk"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9hENjPHrqsvSJcOa_u7nZiX722OqaMbjtGxPvLC8kGnNhAfIwUKRL9NtNBsk\"}"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"784c4061-7b8c-4bad-87d9-d341fef31929","keyName":"e2e-auth-iso-a-b34f07","subscription":"e2e-auth-iso-ead35b","tenant":"e2e-shared-a-51b4ec","userId":"784c4061-7b8c-4bad-87d9-d341fef31929","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/auth-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ead35b"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea45b764-f60d-4a2f-9919-4e8bd95666f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd2f078a523898cd65603d4aec56807adb3198575ce692ac39a833020f3091dc"} {"level":"info","ts":"2026-07-19T15:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"} {"level":"info","ts":"2026-07-19T15:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c52fd72b7751a97b8038fa32d5cdd5d18d375ccfa3b699213cd2bbd4f95938e"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04d0f1f87163ab694dd80c963e1f7b2a696dd1e3bec8a72e6b05657d6b16e143"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9e4d66a2fc9bbab4889a9623ba1fc7d510f5b5418f9a21af7eae6d342817691"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe55c39ba54e7e343426612f965ebd06cd0a25615610e632e68dbcdee729d7c"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d1dab834cec17b5eb0ce16dc75a443000f369888f5f27b701f52dae39009485"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/307ed0aeb1c0b72957ff731cb30b8afcc19f7f8adeaf10244a6aeb97f72dfc7b"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e09e7c6456d7e1fa4994330efc871c71bc342d147c6bbc839b0bfea45a0716a"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e27e8e2ff9b316ac19d453456be44eddc61f5a3c9be0312dd531c1ac537ddf5"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c085f5e0d5b537a967e6e4d3e9677bc43e7d21d7e132cc610e88adc790aa592"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df10df50c2fdaf87fb14dd7e2b06ec37dca295111e7b04d05615da9b106ee7a1"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7f9a660165141b8deca7dff02e3e2ad99fbba0a00dfec81bff87a6672109bb3"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5b5b7fdd2409bf9cd611c11d41535a3caa058d68ba65e3dd38b863da0683160"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2eff45c99ed3bc9664bf515cca0a29d10ede6f095ff58da4cccdd800c172fb0"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ac9bb9330261d498008308d13f2a52b915db58c14697da81d08390e00ea110d"} {"level":"info","ts":"2026-07-19T15:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/761775e54b4d692e5c072ac8cc7e0d78af65f8690ed4bddbad98cae3c1ae6996"} {"level":"debug","ts":"2026-07-19T15:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"debug","ts":"2026-07-19T15:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f"} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f"} {"level":"error","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32"} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe"} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe"} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325"} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaa7d738ec4ce632e75d28d3e7722f153f673cda5f3d227fbfc999b85f49d786"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaa7d738ec4ce632e75d28d3e7722f153f673cda5f3d227fbfc999b85f49d786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaa7d738ec4ce632e75d28d3e7722f153f673cda5f3d227fbfc999b85f49d786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d30589c8ef3a5fd56177549db57f94cda2fff19bb4bb6d5c9df1201a4efa60"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaa7d738ec4ce632e75d28d3e7722f153f673cda5f3d227fbfc999b85f49d786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaa7d738ec4ce632e75d28d3e7722f153f673cda5f3d227fbfc999b85f49d786"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9"} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d30589c8ef3a5fd56177549db57f94cda2fff19bb4bb6d5c9df1201a4efa60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d30589c8ef3a5fd56177549db57f94cda2fff19bb4bb6d5c9df1201a4efa60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d30589c8ef3a5fd56177549db57f94cda2fff19bb4bb6d5c9df1201a4efa60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d30589c8ef3a5fd56177549db57f94cda2fff19bb4bb6d5c9df1201a4efa60"} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaa7d738ec4ce632e75d28d3e7722f153f673cda5f3d227fbfc999b85f49d786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d30589c8ef3a5fd56177549db57f94cda2fff19bb4bb6d5c9df1201a4efa60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:42:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"error","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37122","PortSpecifier":{"PortValue":37122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37122","PortSpecifier":{"PortValue":37122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475737,"nanos":184624012},"http":{"id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/sub-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81e3a518-32fc-4429-8dcb-0a238dc2ee4d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55428","PortSpecifier":{"PortValue":55428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55428","PortSpecifier":{"PortValue":55428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475737,"nanos":226646525},"http":{"id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/sub-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0789fe7f-1ffe-48ad-b20f-4e6972f387ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37134","PortSpecifier":{"PortValue":37134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b199fd51-5959-406c-9707-0c0633c5ddfd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37134","PortSpecifier":{"PortValue":37134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475737,"nanos":266842534},"http":{"id":"b199fd51-5959-406c-9707-0c0633c5ddfd","method":"GET","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EhtJ1FrcSIlOBxzq_izDsvt5A4V6L3JOgBcnCbpC71yLslcG5FiQkp7XpL6s"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EhtJ1FrcSIlOBxzq_izDsvt5A4V6L3JOgBcnCbpC71yLslcG5FiQkp7XpL6s\"}"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b1183e1-e2f4-4dd6-9cac-fa9b12021300","keyName":"e2e-sub-iso-e83fe9","subscription":"e2e-a-only-6ded16","tenant":"e2e-shared-a-51b4ec","userId":"9b1183e1-e2f4-4dd6-9cac-fa9b12021300","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/sub-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6ded16"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b199fd51-5959-406c-9707-0c0633c5ddfd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55440","PortSpecifier":{"PortValue":55440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55440","PortSpecifier":{"PortValue":55440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475737,"nanos":309052416},"http":{"id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","method":"GET","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O1i7O6kyZUfdxlXM_HYomXGsQsItXjgA83EFJGUpxglVkgxEKPBCU1BZLtv9"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O1i7O6kyZUfdxlXM_HYomXGsQsItXjgA83EFJGUpxglVkgxEKPBCU1BZLtv9\"}"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"856ff35c-a74d-4313-b2c3-aa10facf646e","keyName":"e2e-sub-iso-048fb7","subscription":"e2e-b-only-6ded16","tenant":"e2e-shared-b-c17947","userId":"856ff35c-a74d-4313-b2c3-aa10facf646e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/sub-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6ded16"} {"level":"info","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7a06bd0-3702-4d4e-a3aa-57d6a9ec30e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40808","PortSpecifier":{"PortValue":40808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40808","PortSpecifier":{"PortValue":40808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475751,"nanos":539060210},"http":{"id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/sub-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b67039e-1e47-49c2-961a-e50d68c9f9f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09beda67-5075-4ddb-9bab-130fdc114112","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34360","PortSpecifier":{"PortValue":34360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09beda67-5075-4ddb-9bab-130fdc114112","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09beda67-5075-4ddb-9bab-130fdc114112","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34360","PortSpecifier":{"PortValue":34360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475751,"nanos":578982332},"http":{"id":"09beda67-5075-4ddb-9bab-130fdc114112","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09beda67-5075-4ddb-9bab-130fdc114112","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09beda67-5075-4ddb-9bab-130fdc114112","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09beda67-5075-4ddb-9bab-130fdc114112","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09beda67-5075-4ddb-9bab-130fdc114112","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09beda67-5075-4ddb-9bab-130fdc114112","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09beda67-5075-4ddb-9bab-130fdc114112","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/sub-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09beda67-5075-4ddb-9bab-130fdc114112","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09beda67-5075-4ddb-9bab-130fdc114112","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09beda67-5075-4ddb-9bab-130fdc114112","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09beda67-5075-4ddb-9bab-130fdc114112","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09beda67-5075-4ddb-9bab-130fdc114112","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40812","PortSpecifier":{"PortValue":40812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40812","PortSpecifier":{"PortValue":40812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475751,"nanos":613465715},"http":{"id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mnQ8uDJ1kfO2fuJ9_bx1NoGrle7l8RfgCW2FvxpsbGLcGntVgtobyflSu7Ck"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mnQ8uDJ1kfO2fuJ9_bx1NoGrle7l8RfgCW2FvxpsbGLcGntVgtobyflSu7Ck\"}"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8665df13-a821-4576-b4fd-0e98038ddd08","keyName":"e2e-sub-iso-5d0734","subscription":"e2e-shared-sub-8286ae","tenant":"e2e-shared-a-51b4ec","userId":"8665df13-a821-4576-b4fd-0e98038ddd08","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/sub-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8286ae"} {"level":"info","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e93c52b3-d1ae-4f25-997c-b09dcaaa63a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34372","PortSpecifier":{"PortValue":34372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34372","PortSpecifier":{"PortValue":34372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475751,"nanos":646550282},"http":{"id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10y4D3U1qTKTkduuW_W9tCXiby44AAZf9N86dxUIgbcbQUs8h5vTPAR6ebTTh"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10y4D3U1qTKTkduuW_W9tCXiby44AAZf9N86dxUIgbcbQUs8h5vTPAR6ebTTh\"}"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"989e9176-abb3-4edb-942e-7ca11f7dff42","keyName":"e2e-sub-iso-aa7ba0","subscription":"e2e-shared-sub-8286ae","tenant":"e2e-shared-b-c17947","userId":"989e9176-abb3-4edb-942e-7ca11f7dff42","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/sub-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8286ae"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:42:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c9c0f3a-fec4-4408-93a1-d92ff6752421","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/265427b53475ace904ac17bc788d84afd085bbbd3d5e3b6a9e05e9bd029fc9c0"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaa7d738ec4ce632e75d28d3e7722f153f673cda5f3d227fbfc999b85f49d786"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d71f979867b98540e0f74020f5cde53d741dba2788fa994533a1a7218a70257"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7b8f12554387487022ecf90002d179af8e4a6f053790e30b6cdf87d1a76fffe"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59e58f1253cb7aa0cc0410d7f9e12070c7c64446ba595a5ea0761b92f56bc8eb"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4bb7a6f4924b1cc192cd97ad2a9e3ef1ba462a7f578e5763030bd115fdc0ef9"} {"level":"info","ts":"2026-07-19T15:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77152bdd055422b4b50c1cce9369cb8c49954d7fc24dec9d95655bc37daaa38f"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a74d8656da951c9ead27ae4d1fcf4ba9f7198d2bcb34cdfab829f9c826a0b6"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6d30589c8ef3a5fd56177549db57f94cda2fff19bb4bb6d5c9df1201a4efa60"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bad5d7c3c2bdbbc4d618e5c7174deba97ec6ab7ca8cba77409c2d6613a3e325"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c6a9d590fb62c3d4e97388a8913f49ba0550854565d1f71555120df98dd4995"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3638b8cf0ab91d84d35c214b2c06dc5f217e80568d1a9716a0475ac33e133f32"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4104092baa0883467571580b2b865b02d73bab843241d37d3b13f79d9a1cddb2"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e822fc3cbec9c78b0eae485ada84e8ef1e2323eb90c0d93fb5f04f7bc93574d3"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dda922a62e13a2313d81c9b5a287be35a5ffbfbfa9cbb4c478777872d9b831d"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b10b00f4c55f4596622eac752685899fef4a815dbf0fa373db9e1dd4872b6e3f"} {"level":"info","ts":"2026-07-19T15:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2"} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2"} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2"} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3"} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3"} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2"} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3"} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84"} {"level":"debug","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84"} {"level":"error","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"} {"level":"error","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8"} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf"} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8"} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3363c5627c4a6fab8c4b74c70e0fa55b63c3fd4252a8ff45247f3b3bfee6a28"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8a727c085d1395d31d8b9cc7394c3b52cfa6166da4495e2ed6052fbfe4d8cb"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3363c5627c4a6fab8c4b74c70e0fa55b63c3fd4252a8ff45247f3b3bfee6a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3363c5627c4a6fab8c4b74c70e0fa55b63c3fd4252a8ff45247f3b3bfee6a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d94292c37f85090d1f7acb41595835bdfe94334ad2e496b0fd5b5d4db1c8a90"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3363c5627c4a6fab8c4b74c70e0fa55b63c3fd4252a8ff45247f3b3bfee6a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8a727c085d1395d31d8b9cc7394c3b52cfa6166da4495e2ed6052fbfe4d8cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8a727c085d1395d31d8b9cc7394c3b52cfa6166da4495e2ed6052fbfe4d8cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5538eb13ddd602ebd5b3c500ea31733483232541a6757bc09d9aeca0b3fd77f0"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8a727c085d1395d31d8b9cc7394c3b52cfa6166da4495e2ed6052fbfe4d8cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d94292c37f85090d1f7acb41595835bdfe94334ad2e496b0fd5b5d4db1c8a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d94292c37f85090d1f7acb41595835bdfe94334ad2e496b0fd5b5d4db1c8a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3363c5627c4a6fab8c4b74c70e0fa55b63c3fd4252a8ff45247f3b3bfee6a28"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8a727c085d1395d31d8b9cc7394c3b52cfa6166da4495e2ed6052fbfe4d8cb"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d94292c37f85090d1f7acb41595835bdfe94334ad2e496b0fd5b5d4db1c8a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5538eb13ddd602ebd5b3c500ea31733483232541a6757bc09d9aeca0b3fd77f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5538eb13ddd602ebd5b3c500ea31733483232541a6757bc09d9aeca0b3fd77f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5f7ea786ca91bc164f3da976d04c20c355ecc70f29214138d4cfe47c8573"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5538eb13ddd602ebd5b3c500ea31733483232541a6757bc09d9aeca0b3fd77f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d94292c37f85090d1f7acb41595835bdfe94334ad2e496b0fd5b5d4db1c8a90"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5538eb13ddd602ebd5b3c500ea31733483232541a6757bc09d9aeca0b3fd77f0"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3363c5627c4a6fab8c4b74c70e0fa55b63c3fd4252a8ff45247f3b3bfee6a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8a727c085d1395d31d8b9cc7394c3b52cfa6166da4495e2ed6052fbfe4d8cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5f7ea786ca91bc164f3da976d04c20c355ecc70f29214138d4cfe47c8573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d96a5f7ea786ca91bc164f3da976d04c20c355ecc70f29214138d4cfe47c8573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5f7ea786ca91bc164f3da976d04c20c355ecc70f29214138d4cfe47c8573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5f7ea786ca91bc164f3da976d04c20c355ecc70f29214138d4cfe47c8573"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d94292c37f85090d1f7acb41595835bdfe94334ad2e496b0fd5b5d4db1c8a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5538eb13ddd602ebd5b3c500ea31733483232541a6757bc09d9aeca0b3fd77f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d96a5f7ea786ca91bc164f3da976d04c20c355ecc70f29214138d4cfe47c8573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"error","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-19T15:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41722","PortSpecifier":{"PortValue":41722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41722","PortSpecifier":{"PortValue":41722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475822,"nanos":184461653},"http":{"id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcd4451d-3fc8-4f76-a17f-0de50b7842ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475822,"nanos":225621770},"http":{"id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e25724d-fc8a-4f95-a3b1-cf799bf560c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41736","PortSpecifier":{"PortValue":41736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a80409c6-da87-4ab1-828b-ca29bc522d53","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41736","PortSpecifier":{"PortValue":41736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475822,"nanos":266418131},"http":{"id":"a80409c6-da87-4ab1-828b-ca29bc522d53","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11\"}"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","subscription":"e2e-rate-iso-a-8e7956","tenant":"e2e-shared-a-51b4ec","userId":"c9108ae1-bf52-418c-b421-17bb7def31dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-8e7956\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e7956"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","selected_subscription":"e2e-rate-iso-a-8e7956","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-8e7956@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a80409c6-da87-4ab1-828b-ca29bc522d53","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a331f84-9639-41d0-87be-5c969d19c658","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41752","PortSpecifier":{"PortValue":41752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a331f84-9639-41d0-87be-5c969d19c658","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a331f84-9639-41d0-87be-5c969d19c658","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41752","PortSpecifier":{"PortValue":41752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475823,"nanos":333652511},"http":{"id":"2a331f84-9639-41d0-87be-5c969d19c658","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11"} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11\"}"} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","subscription":"e2e-rate-iso-a-8e7956","tenant":"e2e-shared-a-51b4ec","userId":"c9108ae1-bf52-418c-b421-17bb7def31dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-8e7956\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a331f84-9639-41d0-87be-5c969d19c658","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e7956"} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a331f84-9639-41d0-87be-5c969d19c658","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","selected_subscription":"e2e-rate-iso-a-8e7956","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-8e7956@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a331f84-9639-41d0-87be-5c969d19c658","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a331f84-9639-41d0-87be-5c969d19c658","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41764","PortSpecifier":{"PortValue":41764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41764","PortSpecifier":{"PortValue":41764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475824,"nanos":377680115},"http":{"id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11"} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11\"}"} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","subscription":"e2e-rate-iso-a-8e7956","tenant":"e2e-shared-a-51b4ec","userId":"c9108ae1-bf52-418c-b421-17bb7def31dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-8e7956\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e7956"} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","selected_subscription":"e2e-rate-iso-a-8e7956","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-8e7956@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a35cd44f-8cb5-48fa-9c2a-7bbf6710da1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41774","PortSpecifier":{"PortValue":41774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41774","PortSpecifier":{"PortValue":41774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475825,"nanos":417663460},"http":{"id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11"} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11\"}"} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","subscription":"e2e-rate-iso-a-8e7956","tenant":"e2e-shared-a-51b4ec","userId":"c9108ae1-bf52-418c-b421-17bb7def31dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-8e7956\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e7956"} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","selected_subscription":"e2e-rate-iso-a-8e7956","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-8e7956@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f2b2a1a-f49b-47bf-b527-d50c55146c05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41784","PortSpecifier":{"PortValue":41784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41784","PortSpecifier":{"PortValue":41784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475826,"nanos":459341949},"http":{"id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11"} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11\"}"} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","subscription":"e2e-rate-iso-a-8e7956","tenant":"e2e-shared-a-51b4ec","userId":"c9108ae1-bf52-418c-b421-17bb7def31dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-8e7956\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e7956"} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","selected_subscription":"e2e-rate-iso-a-8e7956","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-8e7956@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13bd9e4c-9960-4816-a52a-ba02c6a70ecc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41790","PortSpecifier":{"PortValue":41790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29a62676-80b8-47de-9671-7be0ad0d98c3","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41790","PortSpecifier":{"PortValue":41790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475827,"nanos":500493754},"http":{"id":"29a62676-80b8-47de-9671-7be0ad0d98c3","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11"} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11\"}"} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","subscription":"e2e-rate-iso-a-8e7956","tenant":"e2e-shared-a-51b4ec","userId":"c9108ae1-bf52-418c-b421-17bb7def31dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-8e7956\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e7956"} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","selected_subscription":"e2e-rate-iso-a-8e7956","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-8e7956@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29a62676-80b8-47de-9671-7be0ad0d98c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52696","PortSpecifier":{"PortValue":52696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52696","PortSpecifier":{"PortValue":52696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475828,"nanos":539993119},"http":{"id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11"} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4vdEu5UOoS30SP_hSyccTICdkao48qOb4EtE77YFISiebTBv3Q4IUXfh11\"}"} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","subscription":"e2e-rate-iso-a-8e7956","tenant":"e2e-shared-a-51b4ec","userId":"c9108ae1-bf52-418c-b421-17bb7def31dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-8e7956\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8e7956"} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9108ae1-bf52-418c-b421-17bb7def31dc","keyName":"e2e-rate-a-8e7956","selected_subscription":"e2e-rate-iso-a-8e7956","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-8e7956@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8e7956","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16a8be76-e398-4d74-8a8c-d8f719ca63cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52712","PortSpecifier":{"PortValue":52712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4dda016-717a-4e37-a17d-a691ded880f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52712","PortSpecifier":{"PortValue":52712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475837,"nanos":206743796},"http":{"id":"c4dda016-717a-4e37-a17d-a691ded880f0","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4dda016-717a-4e37-a17d-a691ded880f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57422","PortSpecifier":{"PortValue":57422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57422","PortSpecifier":{"PortValue":57422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475837,"nanos":244526417},"http":{"id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"]}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d8127d417295"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=aa059e96-d1cc-4113-bee5-c22637dd5665"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"50599722-a9d9-4e65-b419-9170fa8dfb1a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9cd341f-1386-4a80-883f-11bacd1bd2eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52724","PortSpecifier":{"PortValue":52724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52724","PortSpecifier":{"PortValue":52724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475837,"nanos":277070869},"http":{"id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Fc9mfvaXgEYUiRne_XC9U3ATnHd5waCyMQSR4mpYDHXVG9sXRAtCuIsvPIkC"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Fc9mfvaXgEYUiRne_XC9U3ATnHd5waCyMQSR4mpYDHXVG9sXRAtCuIsvPIkC\"}"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af60e005-3aa3-4890-8856-ad0f7885c426","keyName":"e2e-rate-a-85a3aa","subscription":"e2e-rate-iso-a-85a3aa","tenant":"e2e-shared-a-51b4ec","userId":"af60e005-3aa3-4890-8856-ad0f7885c426","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-85a3aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-85a3aa","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-85a3aa"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af60e005-3aa3-4890-8856-ad0f7885c426","keyName":"e2e-rate-a-85a3aa","selected_subscription":"e2e-rate-iso-a-85a3aa","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-85a3aa@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-85a3aa","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4dae12e-f15a-4c65-bcfe-d05ec214e719","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37816","PortSpecifier":{"PortValue":37816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61c4923f-4f79-48b4-9492-20147e1e47a6","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37816","PortSpecifier":{"PortValue":37816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475838,"nanos":312722662},"http":{"id":"61c4923f-4f79-48b4-9492-20147e1e47a6","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Fc9mfvaXgEYUiRne_XC9U3ATnHd5waCyMQSR4mpYDHXVG9sXRAtCuIsvPIkC"} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Fc9mfvaXgEYUiRne_XC9U3ATnHd5waCyMQSR4mpYDHXVG9sXRAtCuIsvPIkC\"}"} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af60e005-3aa3-4890-8856-ad0f7885c426","keyName":"e2e-rate-a-85a3aa","subscription":"e2e-rate-iso-a-85a3aa","tenant":"e2e-shared-a-51b4ec","userId":"af60e005-3aa3-4890-8856-ad0f7885c426","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-85a3aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-85a3aa","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-85a3aa"} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af60e005-3aa3-4890-8856-ad0f7885c426","keyName":"e2e-rate-a-85a3aa","selected_subscription":"e2e-rate-iso-a-85a3aa","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-85a3aa@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-85a3aa","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61c4923f-4f79-48b4-9492-20147e1e47a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37830","PortSpecifier":{"PortValue":37830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","method":"POST","path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions","host":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37830","PortSpecifier":{"PortValue":37830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475839,"nanos":356712654},"http":{"id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","method":"POST","headers":{":authority":"e2e-shared-a-51b4ec.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Fc9mfvaXgEYUiRne_XC9U3ATnHd5waCyMQSR4mpYDHXVG9sXRAtCuIsvPIkC"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Fc9mfvaXgEYUiRne_XC9U3ATnHd5waCyMQSR4mpYDHXVG9sXRAtCuIsvPIkC\"}"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af60e005-3aa3-4890-8856-ad0f7885c426","keyName":"e2e-rate-a-85a3aa","subscription":"e2e-rate-iso-a-85a3aa","tenant":"e2e-shared-a-51b4ec","userId":"af60e005-3aa3-4890-8856-ad0f7885c426","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\",\"requestedSubscription\":\"e2e-rate-iso-a-85a3aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-51b4ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-85a3aa","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-51b4ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-85a3aa"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af60e005-3aa3-4890-8856-ad0f7885c426","keyName":"e2e-rate-a-85a3aa","selected_subscription":"e2e-rate-iso-a-85a3aa","selected_subscription_key":"ai-tenant-e2e-shared-a-51b4ec/e2e-rate-iso-a-85a3aa@ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-51b4ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-85a3aa","namespace":"ai-tenant-e2e-shared-a-51b4ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-51b4ec/rate-test-model-51b4ec"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ff1cdf4-c39f-47cd-9e9a-5cea5beb90ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43886","PortSpecifier":{"PortValue":43886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d19173f9-24d9-4381-997f-fb8fadba890a","method":"POST","path":"/ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947/v1/completions","host":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43886","PortSpecifier":{"PortValue":43886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475839,"nanos":396279568},"http":{"id":"d19173f9-24d9-4381-997f-fb8fadba890a","method":"POST","headers":{":authority":"e2e-shared-b-c17947.apps.015b15a4-eb38-4075-9999-d8127d417295.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cp7PjT4WEJvcqn5O_Jyej7kJxde1IJcIGn1mOvmOLqRjeYo1iW8h9v1kaYe9"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cp7PjT4WEJvcqn5O_Jyej7kJxde1IJcIGn1mOvmOLqRjeYo1iW8h9v1kaYe9\"}"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d285639-a50c-408a-ac5b-4cbb188fcdfc","keyName":"e2e-rate-b-85a3aa","subscription":"e2e-rate-iso-b-85a3aa","tenant":"e2e-shared-b-c17947","userId":"3d285639-a50c-408a-ac5b-4cbb188fcdfc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947\",\"requestedSubscription\":\"e2e-rate-iso-b-85a3aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c17947.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c17947","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-85a3aa","namespace":"ai-tenant-e2e-shared-b-c17947","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947"}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c17947/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-85a3aa"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d285639-a50c-408a-ac5b-4cbb188fcdfc","keyName":"e2e-rate-b-85a3aa","selected_subscription":"e2e-rate-iso-b-85a3aa","selected_subscription_key":"ai-tenant-e2e-shared-b-c17947/e2e-rate-iso-b-85a3aa@ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c17947","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-85a3aa","namespace":"ai-tenant-e2e-shared-b-c17947","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c17947/rate-test-model-c17947"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-19T15:43:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d19173f9-24d9-4381-997f-fb8fadba890a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-19T15:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbea68154f29c0a284d65f9a8e9fe1b5f532534a3acf21c97b0d1f0a2c6c1b0b"} {"level":"info","ts":"2026-07-19T15:44:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26efc8c89d85fe4530555af5d2596dcc0da496e84e4163c218701560811df3bf"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e920acce3b771527c2ee0fe02113e9ddc003893c4f1f7cf1e64460e3fbb61cc2"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7f207a09e47be94c0fd12384fde4b1339612bba20fda708276d0f16644e02e2"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b891915eac46c2d6820d161f15a490979eca4e5d478965e8a85440a5dc198c84"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d96a5f7ea786ca91bc164f3da976d04c20c355ecc70f29214138d4cfe47c8573"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da40e049fab12ca1b85592d6d99ba3cb1b28c5bf056b72ee417bb05d78e7f305"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b108beb11d186e444634de6aa5554ff337fe29e30d885920f0ecea50c1b09ff9"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fdd2b7e6edb7c181f9551541b775394bbad0115df40dd930117e3a7a286c8cf"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5849121cd7bf708099ccb2205ae319734a71e9e08a1926fcb2a69daf099853"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5430934d1f63083a9e5bea62992f7355f5eaac74e3b35258e4b8e8fc1d968dd3"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eda3e8556229a6469ba03a63de08687fd5d69611d42084764431afb4cd29b694"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e44604f28a8f57fd71570e222d16f5dd6fea9e38ba88e588d8314574a3d7e281"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d94292c37f85090d1f7acb41595835bdfe94334ad2e496b0fd5b5d4db1c8a90"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8a727c085d1395d31d8b9cc7394c3b52cfa6166da4495e2ed6052fbfe4d8cb"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1488686d53af8117f8cd0caf4907216cdfa2bdaee49c495f189ef40b846eeaa8"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/919bec42e80f35bc3eaa3027bdb27c13541e984125c8b184a920661005674770"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec57a7bd8a1b6ac03a2a8c27bdbb61ed1c4e455015ac980acc9a04242969c40f"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5538eb13ddd602ebd5b3c500ea31733483232541a6757bc09d9aeca0b3fd77f0"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad69d44608aeaba99fbf1b59f236632cb4310baf0c7bbb0e1089ebad0a37c9e"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f63046ba57380ecb3b76329897f6c111fe14aec91f13d24f65c4efb46dba0ed"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e33d8c5b52d7037ac11eb40bd5defb0281dfcc1d6a77768affa01615c7948d"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3363c5627c4a6fab8c4b74c70e0fa55b63c3fd4252a8ff45247f3b3bfee6a28"} {"level":"info","ts":"2026-07-19T15:44:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af2f2e74e9f68ea14d80a26b720b4d245d6273d69911da9a37a099d726884032"}