--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/325fc8d7d205499bde6199ba06cb5ee6eb085d702888b97e58f195c49c69aba0"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71baf550f92b209f562f6ef6e76dbdd11ff49beca3a18dea1ad4334e17ef24a1"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"325fc8d7d205499bde6199ba06cb5ee6eb085d702888b97e58f195c49c69aba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71baf550f92b209f562f6ef6e76dbdd11ff49beca3a18dea1ad4334e17ef24a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71baf550f92b209f562f6ef6e76dbdd11ff49beca3a18dea1ad4334e17ef24a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71baf550f92b209f562f6ef6e76dbdd11ff49beca3a18dea1ad4334e17ef24a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71baf550f92b209f562f6ef6e76dbdd11ff49beca3a18dea1ad4334e17ef24a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71baf550f92b209f562f6ef6e76dbdd11ff49beca3a18dea1ad4334e17ef24a1"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"error","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c"} {"level":"error","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c"} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760bb12f88d55a52692faa7757e46df5074f47e0cd76133c4adbfd9088576111"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760bb12f88d55a52692faa7757e46df5074f47e0cd76133c4adbfd9088576111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760bb12f88d55a52692faa7757e46df5074f47e0cd76133c4adbfd9088576111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88550526259704d7d404613b5918114642cf327c4e66897054302cbcd5b413be"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760bb12f88d55a52692faa7757e46df5074f47e0cd76133c4adbfd9088576111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760bb12f88d55a52692faa7757e46df5074f47e0cd76133c4adbfd9088576111"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88550526259704d7d404613b5918114642cf327c4e66897054302cbcd5b413be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88550526259704d7d404613b5918114642cf327c4e66897054302cbcd5b413be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88550526259704d7d404613b5918114642cf327c4e66897054302cbcd5b413be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88550526259704d7d404613b5918114642cf327c4e66897054302cbcd5b413be"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760bb12f88d55a52692faa7757e46df5074f47e0cd76133c4adbfd9088576111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88550526259704d7d404613b5918114642cf327c4e66897054302cbcd5b413be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3"} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3"} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3"} {"level":"debug","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"info","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"debug","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"debug","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f"} {"level":"error","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702"} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692"} {"level":"info","ts":"2026-07-14T18:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702"} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"error","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"info","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4944548-2b28-4a64-b699-b21c269431a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59328","PortSpecifier":{"PortValue":59328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4944548-2b28-4a64-b699-b21c269431a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4944548-2b28-4a64-b699-b21c269431a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59328","PortSpecifier":{"PortValue":59328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784054992,"nanos":219176899},"http":{"id":"c4944548-2b28-4a64-b699-b21c269431a3","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4944548-2b28-4a64-b699-b21c269431a3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4944548-2b28-4a64-b699-b21c269431a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4944548-2b28-4a64-b699-b21c269431a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4944548-2b28-4a64-b699-b21c269431a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4944548-2b28-4a64-b699-b21c269431a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4944548-2b28-4a64-b699-b21c269431a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4944548-2b28-4a64-b699-b21c269431a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4944548-2b28-4a64-b699-b21c269431a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4944548-2b28-4a64-b699-b21c269431a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4944548-2b28-4a64-b699-b21c269431a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4944548-2b28-4a64-b699-b21c269431a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41378","PortSpecifier":{"PortValue":41378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41378","PortSpecifier":{"PortValue":41378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784054992,"nanos":281662390},"http":{"id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70c85c29-86ca-47a7-a7c2-6e6aa1c632c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59344","PortSpecifier":{"PortValue":59344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","method":"GET","path":"/maas-api/v1/api-keys/72340ac5-09a6-432e-839e-96c135f60d09","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59344","PortSpecifier":{"PortValue":59344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784054992,"nanos":350716036},"http":{"id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","method":"GET","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/72340ac5-09a6-432e-839e-96c135f60d09",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/72340ac5-09a6-432e-839e-96c135f60d09",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0f0d411-1b42-4807-95a5-bdb3946e06f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41388","PortSpecifier":{"PortValue":41388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","method":"GET","path":"/maas-api/v1/api-keys/9c59530f-c2d1-4b55-a8f0-ca744e39b8aa","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41388","PortSpecifier":{"PortValue":41388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784054992,"nanos":389449169},"http":{"id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","method":"GET","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9c59530f-c2d1-4b55-a8f0-ca744e39b8aa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9c59530f-c2d1-4b55-a8f0-ca744e39b8aa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5238735a-a4f8-4bed-bc3d-81a39090f7f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33042","PortSpecifier":{"PortValue":33042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33042","PortSpecifier":{"PortValue":33042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055009,"nanos":874344795},"http":{"id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f92fbb1d-2ff4-4f5a-8a3a-95ed3ff3c022","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37376","PortSpecifier":{"PortValue":37376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37376","PortSpecifier":{"PortValue":37376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055009,"nanos":912189966},"http":{"id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"667d482a-66c8-4b01-8de0-eb1bbd7d8b44","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33046","PortSpecifier":{"PortValue":33046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33046","PortSpecifier":{"PortValue":33046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055009,"nanos":955513460},"http":{"id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","method":"GET","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tCFXsmuOnDArOoYP_3MW3dciUQniApzGJtiGtuVhv5qDiXd0NRUYmfaOoTm3"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tCFXsmuOnDArOoYP_3MW3dciUQniApzGJtiGtuVhv5qDiXd0NRUYmfaOoTm3\"}"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d4119bbd-a44f-4829-8beb-9f500055d772","keyName":"e2e-auth-iso-a-386436","subscription":"e2e-auth-iso-c056c0","tenant":"e2e-shared-a-5bb958","userId":"d4119bbd-a44f-4829-8beb-9f500055d772","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c056c0"} {"level":"info","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae2ad0a3-50e7-490f-b0b3-eaa84ee0533e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41696","PortSpecifier":{"PortValue":41696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41696","PortSpecifier":{"PortValue":41696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055027,"nanos":461928920},"http":{"id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a53d51e-09ca-4bfc-8258-583c83357fa1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36814","PortSpecifier":{"PortValue":36814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54c5f3fb-eb39-458a-893e-3980c152557a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36814","PortSpecifier":{"PortValue":36814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055027,"nanos":503707150},"http":{"id":"54c5f3fb-eb39-458a-893e-3980c152557a","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c5f3fb-eb39-458a-893e-3980c152557a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3da95ec0-376a-974f-a180-4eb549375c39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36820","PortSpecifier":{"PortValue":36820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3da95ec0-376a-974f-a180-4eb549375c39","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3da95ec0-376a-974f-a180-4eb549375c39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36820","PortSpecifier":{"PortValue":36820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055027,"nanos":545718168},"http":{"id":"3da95ec0-376a-974f-a180-4eb549375c39","method":"GET","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3da95ec0-376a-974f-a180-4eb549375c39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PxGrhluhw6OdcQdU_TT9huDdwa98gN6CFb6afQ04wuKVoSt0RSTkaKGKU16i"} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3da95ec0-376a-974f-a180-4eb549375c39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PxGrhluhw6OdcQdU_TT9huDdwa98gN6CFb6afQ04wuKVoSt0RSTkaKGKU16i\"}"} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3da95ec0-376a-974f-a180-4eb549375c39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3da95ec0-376a-974f-a180-4eb549375c39","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3da95ec0-376a-974f-a180-4eb549375c39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3da95ec0-376a-974f-a180-4eb549375c39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3da95ec0-376a-974f-a180-4eb549375c39","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T18:50:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3da95ec0-376a-974f-a180-4eb549375c39","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53666","PortSpecifier":{"PortValue":53666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53666","PortSpecifier":{"PortValue":53666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055045,"nanos":96736392},"http":{"id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b316598-5b20-48ab-ac29-75cc4f5b95b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fd84623-822e-4551-9e0b-79474da818e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50730","PortSpecifier":{"PortValue":50730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fd84623-822e-4551-9e0b-79474da818e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fd84623-822e-4551-9e0b-79474da818e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50730","PortSpecifier":{"PortValue":50730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055045,"nanos":133833858},"http":{"id":"7fd84623-822e-4551-9e0b-79474da818e2","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fd84623-822e-4551-9e0b-79474da818e2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fd84623-822e-4551-9e0b-79474da818e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fd84623-822e-4551-9e0b-79474da818e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fd84623-822e-4551-9e0b-79474da818e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fd84623-822e-4551-9e0b-79474da818e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fd84623-822e-4551-9e0b-79474da818e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fd84623-822e-4551-9e0b-79474da818e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fd84623-822e-4551-9e0b-79474da818e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fd84623-822e-4551-9e0b-79474da818e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fd84623-822e-4551-9e0b-79474da818e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fd84623-822e-4551-9e0b-79474da818e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96770fba-987d-4605-9388-75480fd28f64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53674","PortSpecifier":{"PortValue":53674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96770fba-987d-4605-9388-75480fd28f64","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96770fba-987d-4605-9388-75480fd28f64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53674","PortSpecifier":{"PortValue":53674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055045,"nanos":170935156},"http":{"id":"96770fba-987d-4605-9388-75480fd28f64","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96770fba-987d-4605-9388-75480fd28f64","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96770fba-987d-4605-9388-75480fd28f64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96770fba-987d-4605-9388-75480fd28f64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96770fba-987d-4605-9388-75480fd28f64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96770fba-987d-4605-9388-75480fd28f64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96770fba-987d-4605-9388-75480fd28f64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96770fba-987d-4605-9388-75480fd28f64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96770fba-987d-4605-9388-75480fd28f64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96770fba-987d-4605-9388-75480fd28f64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96770fba-987d-4605-9388-75480fd28f64","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96770fba-987d-4605-9388-75480fd28f64","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50736","PortSpecifier":{"PortValue":50736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50736","PortSpecifier":{"PortValue":50736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055045,"nanos":211829934},"http":{"id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:50:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb160bd0-8a52-4262-8377-36dfd9c1af9f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60558","PortSpecifier":{"PortValue":60558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ecf9a6d-8231-4126-afba-9628efca74e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60558","PortSpecifier":{"PortValue":60558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055062,"nanos":845359874},"http":{"id":"1ecf9a6d-8231-4126-afba-9628efca74e1","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ecf9a6d-8231-4126-afba-9628efca74e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41330","PortSpecifier":{"PortValue":41330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41330","PortSpecifier":{"PortValue":41330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055062,"nanos":885254763},"http":{"id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76ed5ab9-3f51-4b75-b701-9833ae7fa84a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41340","PortSpecifier":{"PortValue":41340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f33800f-3dc7-478a-a752-756d82c41b5f","method":"GET","path":"/maas-api/v1/api-keys/9390be8c-7b5f-4eca-a71e-89dafa0e5be0","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41340","PortSpecifier":{"PortValue":41340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055062,"nanos":934525334},"http":{"id":"8f33800f-3dc7-478a-a752-756d82c41b5f","method":"GET","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9390be8c-7b5f-4eca-a71e-89dafa0e5be0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9390be8c-7b5f-4eca-a71e-89dafa0e5be0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f33800f-3dc7-478a-a752-756d82c41b5f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60566","PortSpecifier":{"PortValue":60566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","method":"GET","path":"/maas-api/v1/api-keys/9390be8c-7b5f-4eca-a71e-89dafa0e5be0","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60566","PortSpecifier":{"PortValue":60566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055062,"nanos":970710443},"http":{"id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","method":"GET","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9390be8c-7b5f-4eca-a71e-89dafa0e5be0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9390be8c-7b5f-4eca-a71e-89dafa0e5be0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afef3b5c-d33c-4ed3-8563-2cafb652dff3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40714","PortSpecifier":{"PortValue":40714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40714","PortSpecifier":{"PortValue":40714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055080,"nanos":707632738},"http":{"id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2dc394f-c1cb-4bd0-befa-adb13433def1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60572","PortSpecifier":{"PortValue":60572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60572","PortSpecifier":{"PortValue":60572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055080,"nanos":742644075},"http":{"id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/auth-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f413ee6-28fa-4ac0-863b-f86ecdead656","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055080,"nanos":782226537},"http":{"id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-amZNOxa9R7bCdOKK_G9Ei7FZkTBcF6NbtbG0vhMJu0HdthjwWIGTdv0ebdhk"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-amZNOxa9R7bCdOKK_G9Ei7FZkTBcF6NbtbG0vhMJu0HdthjwWIGTdv0ebdhk\"}"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc539610-bbb3-4bc5-9600-1145cf25ae8e","keyName":"e2e-auth-iso-a-b4a4b7","subscription":"e2e-auth-iso-a30dde","tenant":"e2e-shared-a-5bb958","userId":"fc539610-bbb3-4bc5-9600-1145cf25ae8e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/auth-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a30dde"} {"level":"info","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9ab408d-9989-4acd-8c7f-8f49ded844e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:51:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef8de0c8d36fd3862de900481e4960bdb57f5e1dcfd9c7d1b39989ad4cbc336f"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4332b2259ad22742b53ba2fb3610ea925dc496ceb9e4df3f08209e78766faf9a"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d816cad72f5f3f06ba6f594fa0c907c25677187a210154f26f4a3ac61d24a702"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88550526259704d7d404613b5918114642cf327c4e66897054302cbcd5b413be"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71baf550f92b209f562f6ef6e76dbdd11ff49beca3a18dea1ad4334e17ef24a1"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86986313eed8af1142a35d89ba1364bb4fc51df8d34d075234e82bd80d5f1399"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af32911f5fc49a05959d729162f4d8269f03a7c6dc8000d1289ae62c7a882567"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/760bb12f88d55a52692faa7757e46df5074f47e0cd76133c4adbfd9088576111"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44eaa26fef4885bbd8dfa2996bd4fc661f0ef1219dafd180683f1d23b014a194"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e203b6f42c7743e1e6996a86fdf5332b0d53b12ed1ee879ca3d51e92b02096b4"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a55c4ab7b2308111fd83af3d4146e6398cd07a0403d3c57f4e1bd997055e9d3"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/325fc8d7d205499bde6199ba06cb5ee6eb085d702888b97e58f195c49c69aba0"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/346afafd6d8dc6ff74739c0f296fefd07137b43ae01bde4fcaf07048d806601c"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5634c296f0d175765d960243d40ac239b9e9a1119d00f231d5468890adb22f0"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f17a6133101c36f7e550d7383a2b5953d960c916b37ef763b4bc568bc70fa94"} {"level":"info","ts":"2026-07-14T18:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d796410afbbc044ecc36ee0c40078bf0ac68048c2ea379bda0995f0ddcbc80b3"} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"} {"level":"error","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172"} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096"} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"info","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66"} {"level":"debug","ts":"2026-07-14T18:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66"} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"debug","ts":"2026-07-14T18:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e"} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"error","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"error","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"error","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096"} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"} {"level":"debug","ts":"2026-07-14T18:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"debug","ts":"2026-07-14T18:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"} {"level":"info","ts":"2026-07-14T18:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"error","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:52:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:52:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"info","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9739458-c18e-4b03-935b-642799d07a92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45792","PortSpecifier":{"PortValue":45792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9739458-c18e-4b03-935b-642799d07a92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9739458-c18e-4b03-935b-642799d07a92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45792","PortSpecifier":{"PortValue":45792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055157,"nanos":61403492},"http":{"id":"b9739458-c18e-4b03-935b-642799d07a92","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9739458-c18e-4b03-935b-642799d07a92","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9739458-c18e-4b03-935b-642799d07a92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9739458-c18e-4b03-935b-642799d07a92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9739458-c18e-4b03-935b-642799d07a92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9739458-c18e-4b03-935b-642799d07a92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9739458-c18e-4b03-935b-642799d07a92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/sub-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9739458-c18e-4b03-935b-642799d07a92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9739458-c18e-4b03-935b-642799d07a92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9739458-c18e-4b03-935b-642799d07a92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9739458-c18e-4b03-935b-642799d07a92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9739458-c18e-4b03-935b-642799d07a92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49490","PortSpecifier":{"PortValue":49490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49490","PortSpecifier":{"PortValue":49490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055157,"nanos":119148500},"http":{"id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/sub-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0172db0-63ec-488d-be8b-e3f1a59b8b94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45802","PortSpecifier":{"PortValue":45802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45802","PortSpecifier":{"PortValue":45802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055157,"nanos":176232242},"http":{"id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","method":"GET","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6uReW6nNFH3zfAbS_93GIwzJY5hnMkV82I0EKxQhCp0p7CEQ7eT4Kn83NF6d"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6uReW6nNFH3zfAbS_93GIwzJY5hnMkV82I0EKxQhCp0p7CEQ7eT4Kn83NF6d\"}"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f1e20bc-35c5-42a7-b075-e69d064692b5","keyName":"e2e-sub-iso-7b2886","subscription":"e2e-a-only-baeb6a","tenant":"e2e-shared-a-5bb958","userId":"8f1e20bc-35c5-42a7-b075-e69d064692b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/sub-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-baeb6a"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9d8d5df-395a-4738-ab9b-bcd94c9a933c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"469e679e-11f1-4f00-9992-8826b6577755","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49498","PortSpecifier":{"PortValue":49498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"469e679e-11f1-4f00-9992-8826b6577755","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"469e679e-11f1-4f00-9992-8826b6577755","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49498","PortSpecifier":{"PortValue":49498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055157,"nanos":225183805},"http":{"id":"469e679e-11f1-4f00-9992-8826b6577755","method":"GET","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eY95l55iYXdS6qPk_voD4qsBDY76eejNUdrtFsV9CsXFnOD6cp8BvwF65EyE"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eY95l55iYXdS6qPk_voD4qsBDY76eejNUdrtFsV9CsXFnOD6cp8BvwF65EyE\"}"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1ec92564-3de1-4e14-938e-2eeebac4d43c","keyName":"e2e-sub-iso-b85729","subscription":"e2e-b-only-baeb6a","tenant":"e2e-shared-b-41a771","userId":"1ec92564-3de1-4e14-938e-2eeebac4d43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"469e679e-11f1-4f00-9992-8826b6577755","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/sub-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-baeb6a"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"469e679e-11f1-4f00-9992-8826b6577755","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"469e679e-11f1-4f00-9992-8826b6577755","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"469e679e-11f1-4f00-9992-8826b6577755","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42974","PortSpecifier":{"PortValue":42974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42974","PortSpecifier":{"PortValue":42974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055169,"nanos":94439369},"http":{"id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/sub-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f765e39-1c17-43bd-9437-c639bbb6fc73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33964","PortSpecifier":{"PortValue":33964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88598162-b0e6-4dc0-819a-1b396da65ec6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33964","PortSpecifier":{"PortValue":33964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055169,"nanos":137145392},"http":{"id":"88598162-b0e6-4dc0-819a-1b396da65ec6","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/sub-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88598162-b0e6-4dc0-819a-1b396da65ec6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42980","PortSpecifier":{"PortValue":42980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42980","PortSpecifier":{"PortValue":42980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055169,"nanos":175357526},"http":{"id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XFSgdmNKR0H3f9h9_V0huR93VEJ4mX862g1E7jZ6eNNnwJ5YSDl4hj5IzbB4"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XFSgdmNKR0H3f9h9_V0huR93VEJ4mX862g1E7jZ6eNNnwJ5YSDl4hj5IzbB4\"}"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"09be6ec8-301b-4d80-868d-7a9a605920c7","keyName":"e2e-sub-iso-fef168","subscription":"e2e-shared-sub-c5e211","tenant":"e2e-shared-a-5bb958","userId":"09be6ec8-301b-4d80-868d-7a9a605920c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/sub-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c5e211"} {"level":"info","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b551d10f-2dfb-4283-8aff-14c924dc20a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33970","PortSpecifier":{"PortValue":33970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a33ce90a-cd50-465d-b248-ccc1a3539782","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33970","PortSpecifier":{"PortValue":33970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055169,"nanos":207891283},"http":{"id":"a33ce90a-cd50-465d-b248-ccc1a3539782","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p4aIjYT1mDiZe3LI_auwgicjTl0SjEUqZss6q7YAoKks9OjYahTJ8ql6LatM"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p4aIjYT1mDiZe3LI_auwgicjTl0SjEUqZss6q7YAoKks9OjYahTJ8ql6LatM\"}"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be9b8ca8-a93b-4f59-93b1-55f5b18f2ad0","keyName":"e2e-sub-iso-7d0d72","subscription":"e2e-shared-sub-c5e211","tenant":"e2e-shared-b-41a771","userId":"be9b8ca8-a93b-4f59-93b1-55f5b18f2ad0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/sub-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c5e211"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a33ce90a-cd50-465d-b248-ccc1a3539782","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67abd8cf770366a4a9429a58142cf5ccb42dd7a0461c03e8d247a330a148da0a"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84827b7f4fd5fc263a554fcebdedaad706c58804f15ca0f2043f7f1fdb614072"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07e9fd065b4efa714a0b02360067e6322aac08ba047eba90b07d72a59edf4dc3"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a39ecf35a5c286934b646b39f556c8d897a6cc15e2f89d85bb42cf876a421c66"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb6b46e8090783909f6bd79d5b9d03cb938b3ea5437516d111d263844e836172"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f369cb4de99728956f24c40191ab5f48b68c4d433bdf2fbdf15e50ca12aa639e"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35be972a6f6a2581f39631de2d74a9bdde15e5d06b79243f380c58069680659e"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efddf39045048bd4d5c931832e95b16a09a78e031da8007c2805ba61ce49a5d"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/336fe1198466102a3a0795d849a96470305a1d7a84d6ec99204eea7d19c39a33"} {"level":"info","ts":"2026-07-14T18:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80c2f78f69552c7f9c074d0bf0d5c8673c7ee0509510d5f5a7c5cd586d12f6b5"} {"level":"info","ts":"2026-07-14T18:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bae2622e01ad5433446e429b4d46fc7c58298df575f7e93f87ccdd9485ac457"} {"level":"info","ts":"2026-07-14T18:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ca3a6e67ca89acb5fb28dd9fb9ad19a26ec665474ce66936b865adb23c6259"} {"level":"info","ts":"2026-07-14T18:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b7faabff019f9ab4e796e2794d72c525781d6268bf66c6ded9ce5b294509479"} {"level":"info","ts":"2026-07-14T18:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/615b5f16eafae8adf8e13452a96982088d5a7444218fd8c73be9b61e9ce5ebb0"} {"level":"info","ts":"2026-07-14T18:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a59520a6116ddcbdeedf3ad8f3bdeee639c97f115379341c105ab74f144f9096"} {"level":"info","ts":"2026-07-14T18:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79f4be8763ff2f068ccde2cbeee90b02a32e66021a343b314e4c9f5b7151cb4b"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"error","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"error","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"error","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"error","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"error","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"error","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56630","PortSpecifier":{"PortValue":56630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcb64029-d416-4ca8-867a-24f177ad3864","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56630","PortSpecifier":{"PortValue":56630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055235,"nanos":739992679},"http":{"id":"bcb64029-d416-4ca8-867a-24f177ad3864","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055235,"nanos":784051638},"http":{"id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56636","PortSpecifier":{"PortValue":56636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56636","PortSpecifier":{"PortValue":56636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055235,"nanos":826422407},"http":{"id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp\"}"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","subscription":"e2e-rate-iso-a-722cfe","tenant":"e2e-shared-a-5bb958","userId":"f8078493-fea7-471e-893c-ee2738a7920b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-722cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-722cfe"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","selected_subscription":"e2e-rate-iso-a-722cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-722cfe@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56652","PortSpecifier":{"PortValue":56652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b367a017-63b0-4631-ac81-82dec48bd7ae","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56652","PortSpecifier":{"PortValue":56652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055236,"nanos":919355365},"http":{"id":"b367a017-63b0-4631-ac81-82dec48bd7ae","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp\"}"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","subscription":"e2e-rate-iso-a-722cfe","tenant":"e2e-shared-a-5bb958","userId":"f8078493-fea7-471e-893c-ee2738a7920b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-722cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-722cfe"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","selected_subscription":"e2e-rate-iso-a-722cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-722cfe@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56660","PortSpecifier":{"PortValue":56660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b773c7a-25c0-9c07-9703-4062a8fef533","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56660","PortSpecifier":{"PortValue":56660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055237,"nanos":966254385},"http":{"id":"3b773c7a-25c0-9c07-9703-4062a8fef533","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp\"}"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","subscription":"e2e-rate-iso-a-722cfe","tenant":"e2e-shared-a-5bb958","userId":"f8078493-fea7-471e-893c-ee2738a7920b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-722cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-722cfe"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","selected_subscription":"e2e-rate-iso-a-722cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-722cfe@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42848","PortSpecifier":{"PortValue":42848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb257f88-9414-4fb7-9087-0819e5ec4299","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42848","PortSpecifier":{"PortValue":42848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055251,"nanos":547040465},"http":{"id":"eb257f88-9414-4fb7-9087-0819e5ec4299","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59130","PortSpecifier":{"PortValue":59130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59130","PortSpecifier":{"PortValue":59130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055251,"nanos":587638664},"http":{"id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42854","PortSpecifier":{"PortValue":42854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42854","PortSpecifier":{"PortValue":42854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055251,"nanos":628037444},"http":{"id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj\"}"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","subscription":"e2e-rate-iso-a-1b4028","tenant":"e2e-shared-a-5bb958","userId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-1b4028\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1b4028"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","selected_subscription":"e2e-rate-iso-a-1b4028","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-1b4028@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50394","PortSpecifier":{"PortValue":50394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50394","PortSpecifier":{"PortValue":50394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055252,"nanos":666754963},"http":{"id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj\"}"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","subscription":"e2e-rate-iso-a-1b4028","tenant":"e2e-shared-a-5bb958","userId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-1b4028\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1b4028"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","selected_subscription":"e2e-rate-iso-a-1b4028","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-1b4028@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50400","PortSpecifier":{"PortValue":50400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb27b26f-0537-42c2-8417-9b350d59cab3","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50400","PortSpecifier":{"PortValue":50400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055253,"nanos":705328779},"http":{"id":"fb27b26f-0537-42c2-8417-9b350d59cab3","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj\"}"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","subscription":"e2e-rate-iso-a-1b4028","tenant":"e2e-shared-a-5bb958","userId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-1b4028\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1b4028"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","selected_subscription":"e2e-rate-iso-a-1b4028","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-1b4028@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49654","PortSpecifier":{"PortValue":49654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","method":"POST","path":"/ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771/v1/completions","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49654","PortSpecifier":{"PortValue":49654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055253,"nanos":743953994},"http":{"id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tiimw5Y67MlJBF4F_UE5xjFl3GIM3Qtu0gVg0qhOIv3SByJsyJpWjsLkmiNQ"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tiimw5Y67MlJBF4F_UE5xjFl3GIM3Qtu0gVg0qhOIv3SByJsyJpWjsLkmiNQ\"}"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a87553eb-fbad-420e-b17d-e61a2502fa02","keyName":"e2e-rate-b-1b4028","subscription":"e2e-rate-iso-b-1b4028","tenant":"e2e-shared-b-41a771","userId":"a87553eb-fbad-420e-b17d-e61a2502fa02","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771\",\"requestedSubscription\":\"e2e-rate-iso-b-1b4028\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41a771","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1b4028","namespace":"ai-tenant-e2e-shared-b-41a771","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1b4028"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a87553eb-fbad-420e-b17d-e61a2502fa02","keyName":"e2e-rate-b-1b4028","selected_subscription":"e2e-rate-iso-b-1b4028","selected_subscription_key":"ai-tenant-e2e-shared-b-41a771/e2e-rate-iso-b-1b4028@ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41a771","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1b4028","namespace":"ai-tenant-e2e-shared-b-41a771","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"info","ts":"2026-07-14T18:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"info","ts":"2026-07-14T18:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"info","ts":"2026-07-14T18:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"} {"level":"info","ts":"2026-07-14T18:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"info","ts":"2026-07-14T18:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"info","ts":"2026-07-14T18:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692"} {"level":"info","ts":"2026-07-14T18:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"info","ts":"2026-07-14T18:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"}