--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/auth-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2778be4-b91d-4daf-ab3c-ab87d5525831","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53206","PortSpecifier":{"PortValue":53206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dade6105-fc5b-473a-b424-8d2cc426a837","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53206","PortSpecifier":{"PortValue":53206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854350,"nanos":90367827},"http":{"id":"dade6105-fc5b-473a-b424-8d2cc426a837","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/auth-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dade6105-fc5b-473a-b424-8d2cc426a837","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38882","PortSpecifier":{"PortValue":38882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38882","PortSpecifier":{"PortValue":38882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854350,"nanos":128566416},"http":{"id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/auth-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:52:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3f6ccfe-3f16-4924-b716-2ebd5c09608b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"info","ts":"2026-07-24T00:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"error","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"} {"level":"info","ts":"2026-07-24T00:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"} {"level":"info","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53848","PortSpecifier":{"PortValue":53848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0dccffb4-9059-495c-a825-3b881bd05f34","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53848","PortSpecifier":{"PortValue":53848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854369,"nanos":525210697},"http":{"id":"0dccffb4-9059-495c-a825-3b881bd05f34","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/auth-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dccffb4-9059-495c-a825-3b881bd05f34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43156","PortSpecifier":{"PortValue":43156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43156","PortSpecifier":{"PortValue":43156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854369,"nanos":563767612},"http":{"id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/auth-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"610cc669-94ee-44f7-b53c-7ad3e35a49ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9453d744-5419-4baa-9687-d7374996f0e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43162","PortSpecifier":{"PortValue":43162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9453d744-5419-4baa-9687-d7374996f0e3","method":"GET","path":"/maas-api/v1/api-keys/570d1974-0241-4afb-97f8-03a345862b44","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9453d744-5419-4baa-9687-d7374996f0e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43162","PortSpecifier":{"PortValue":43162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854369,"nanos":600022180},"http":{"id":"9453d744-5419-4baa-9687-d7374996f0e3","method":"GET","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/570d1974-0241-4afb-97f8-03a345862b44",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9453d744-5419-4baa-9687-d7374996f0e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9453d744-5419-4baa-9687-d7374996f0e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9453d744-5419-4baa-9687-d7374996f0e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/570d1974-0241-4afb-97f8-03a345862b44",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9453d744-5419-4baa-9687-d7374996f0e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9453d744-5419-4baa-9687-d7374996f0e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/auth-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9453d744-5419-4baa-9687-d7374996f0e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9453d744-5419-4baa-9687-d7374996f0e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9453d744-5419-4baa-9687-d7374996f0e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9453d744-5419-4baa-9687-d7374996f0e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9453d744-5419-4baa-9687-d7374996f0e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9453d744-5419-4baa-9687-d7374996f0e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53858","PortSpecifier":{"PortValue":53858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","method":"GET","path":"/maas-api/v1/api-keys/570d1974-0241-4afb-97f8-03a345862b44","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53858","PortSpecifier":{"PortValue":53858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854369,"nanos":634609087},"http":{"id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","method":"GET","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/570d1974-0241-4afb-97f8-03a345862b44",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/570d1974-0241-4afb-97f8-03a345862b44",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/auth-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d0f73e1-f146-442b-951d-fa2ed34d2cf9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"info","ts":"2026-07-24T00:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"error","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"} {"level":"info","ts":"2026-07-24T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"info","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58100","PortSpecifier":{"PortValue":58100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77a7281c-3d31-4500-9250-8e32c93f6a24","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58100","PortSpecifier":{"PortValue":58100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854389,"nanos":86871992},"http":{"id":"77a7281c-3d31-4500-9250-8e32c93f6a24","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/auth-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77a7281c-3d31-4500-9250-8e32c93f6a24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53436","PortSpecifier":{"PortValue":53436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53436","PortSpecifier":{"PortValue":53436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854389,"nanos":124966919},"http":{"id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/auth-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c30ec6-c19b-4e5d-9ffb-0a4bff4cf2aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58110","PortSpecifier":{"PortValue":58110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58110","PortSpecifier":{"PortValue":58110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854389,"nanos":169579804},"http":{"id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YY95kGKptpq4AVsY_eohteZUDptnh9bcFxutnCaZ4BCWRxpP2GykPj7WQu1z"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YY95kGKptpq4AVsY_eohteZUDptnh9bcFxutnCaZ4BCWRxpP2GykPj7WQu1z\"}"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b4a6541a-5979-4e5e-a9d5-fe0836eadac3","keyName":"e2e-auth-iso-a-96ebcd","subscription":"e2e-auth-iso-3affee","tenant":"e2e-shared-a-44952a","userId":"b4a6541a-5979-4e5e-a9d5-fe0836eadac3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/auth-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3affee"} {"level":"info","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:53:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cc14e1a-5038-4c05-8e3d-2f5178330178","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2646fccedf6d2db37347aaa557b4246bfbe27ce74f80a3181e6b788712a2c526"} {"level":"info","ts":"2026-07-24T00:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6741c85b01ac08ceb9ad058c1fc03a6377d953669ad97338c1e9d5cd3878ecc3"} {"level":"info","ts":"2026-07-24T00:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b34bbcbce59a2c66c498d6e7902ee8d6251a7c8c44ade249b86c2e895281f762"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7b3e2741592156d1f623765ae447cc02eeacd9c0cb09339d265a40388c876a8"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/303d0f5cd793b51fa0b21d1c788aa0ba482b2e99cfb5025966c9fd0c4c32d8af"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4f21448bd0e769e03da5377d8222a105188506635a3f0140cbb74705d26f4e"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feb78b794af4550e1c8cfaa816009461949d3530fdb921080ea61970825c73a2"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb905762e613c3d6ece2339a36ab0bbafeb8f7d4823a28f384466588a9980eca"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/505e6849ff7f2b676b4c48cf612ca8c4e221be60f0d7922153c29879754dd24b"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58bb7331d0469e94d4fad77d1adc122792a7a6055444e2dc8605866aa589950c"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e3250789ac823b9d8f165cd0b7909db36dc67f5295dfcafa8f708abea6d761"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4afe4a768aab8575d08c84f05acbfd54cabfab452472ee2da4cbea02c816ca0"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/737267fd4d04e222fcdd420599e57be87cba5ba77ec9cf7a35aa9bc1a481e71c"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/477c642da5bf811ee7b0ca41d936ffbd219427e9720ffbd09f80f48ac867a401"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c395dd765aa27826a5b5ffad94d8a125255f34aaa64f85018db00b5ec4ea6d90"} {"level":"info","ts":"2026-07-24T00:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/802c445982ec29aacdf3254164e631288b279a5275c58fdbecd7be1c9d362b4a"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"} {"level":"debug","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"error","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37"} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e"} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"error","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c621001-9400-4608-a68c-48f24ae423da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57766","PortSpecifier":{"PortValue":57766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c621001-9400-4608-a68c-48f24ae423da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c621001-9400-4608-a68c-48f24ae423da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57766","PortSpecifier":{"PortValue":57766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854468,"nanos":385533286},"http":{"id":"9c621001-9400-4608-a68c-48f24ae423da","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c621001-9400-4608-a68c-48f24ae423da","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c621001-9400-4608-a68c-48f24ae423da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c621001-9400-4608-a68c-48f24ae423da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c621001-9400-4608-a68c-48f24ae423da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c621001-9400-4608-a68c-48f24ae423da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c621001-9400-4608-a68c-48f24ae423da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/sub-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c621001-9400-4608-a68c-48f24ae423da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c621001-9400-4608-a68c-48f24ae423da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c621001-9400-4608-a68c-48f24ae423da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c621001-9400-4608-a68c-48f24ae423da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c621001-9400-4608-a68c-48f24ae423da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56664","PortSpecifier":{"PortValue":56664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56664","PortSpecifier":{"PortValue":56664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854468,"nanos":425041653},"http":{"id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/sub-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8911b3f-8705-4dcf-87ad-ce764fdd5b85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57776","PortSpecifier":{"PortValue":57776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57776","PortSpecifier":{"PortValue":57776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854468,"nanos":466457555},"http":{"id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","method":"GET","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R40CD3H3BKKtl1UH_Bdn7QtmT0mKLj8tF5CXrry0AiRKUaBnVkx3OKWx9g5E"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R40CD3H3BKKtl1UH_Bdn7QtmT0mKLj8tF5CXrry0AiRKUaBnVkx3OKWx9g5E\"}"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be7abc7f-6fe6-4942-a128-ff3db0fce9fb","keyName":"e2e-sub-iso-957627","subscription":"e2e-a-only-27f297","tenant":"e2e-shared-a-44952a","userId":"be7abc7f-6fe6-4942-a128-ff3db0fce9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/sub-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-27f297"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dc92a4d-4b0c-4cb9-9fa3-28b687a64dfa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56670","PortSpecifier":{"PortValue":56670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"102cefb5-eb7b-4e17-8789-233e672205f7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56670","PortSpecifier":{"PortValue":56670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854468,"nanos":511898466},"http":{"id":"102cefb5-eb7b-4e17-8789-233e672205f7","method":"GET","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O6NU85OaKRTQSWcV_1H4eHppqiamng5gWsskZL9rYvfKSr8c3ugJ9nQv0ZVl"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O6NU85OaKRTQSWcV_1H4eHppqiamng5gWsskZL9rYvfKSr8c3ugJ9nQv0ZVl\"}"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6713661-ccec-4917-8b2a-25bfffce17be","keyName":"e2e-sub-iso-18f2b6","subscription":"e2e-b-only-27f297","tenant":"e2e-shared-b-91a75b","userId":"b6713661-ccec-4917-8b2a-25bfffce17be","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/sub-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-27f297"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"102cefb5-eb7b-4e17-8789-233e672205f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37"} {"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613"} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613"} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"error","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"debug","ts":"2026-07-24T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46880","PortSpecifier":{"PortValue":46880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46880","PortSpecifier":{"PortValue":46880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854487,"nanos":169361256},"http":{"id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/sub-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccb6ddb6-ded8-4bb1-94b4-4140cc7a09a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56884","PortSpecifier":{"PortValue":56884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56884","PortSpecifier":{"PortValue":56884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854487,"nanos":210022494},"http":{"id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/sub-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e7d0a70-6a17-4469-b47d-96e3e24ec912","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46886","PortSpecifier":{"PortValue":46886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46886","PortSpecifier":{"PortValue":46886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854487,"nanos":248018802},"http":{"id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OxhgNdlh42lITyPG_ABwq9SJGme4EuOXP4Al8Zd3OFYvINtPAHuYZNqBAfT1"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OxhgNdlh42lITyPG_ABwq9SJGme4EuOXP4Al8Zd3OFYvINtPAHuYZNqBAfT1\"}"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"22a9f543-84a0-4749-816b-f831fea099f3","keyName":"e2e-sub-iso-f43922","subscription":"e2e-shared-sub-b94934","tenant":"e2e-shared-a-44952a","userId":"22a9f543-84a0-4749-816b-f831fea099f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/sub-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b94934"} {"level":"info","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eef4b418-d46b-4cd5-babb-9a0bffdcc92b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56896","PortSpecifier":{"PortValue":56896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56d98799-8478-4ed9-ac92-729e2f73353e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56896","PortSpecifier":{"PortValue":56896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854487,"nanos":278939848},"http":{"id":"56d98799-8478-4ed9-ac92-729e2f73353e","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hIN3DJzM6u6JLnMs_qZhQYL5UYgpjQML8ETvodPKKL5zIbGABbzSxuCM5ZoW"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hIN3DJzM6u6JLnMs_qZhQYL5UYgpjQML8ETvodPKKL5zIbGABbzSxuCM5ZoW\"}"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3386d9c2-d835-4b45-8671-6e1ad2b4fbf9","keyName":"e2e-sub-iso-fbffcb","subscription":"e2e-shared-sub-b94934","tenant":"e2e-shared-b-91a75b","userId":"3386d9c2-d835-4b45-8671-6e1ad2b4fbf9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/sub-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b94934"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56d98799-8478-4ed9-ac92-729e2f73353e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ba94c505365729bf7a638347a27e45920110ecde73fdcfeca47ad4ae116562"} {"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/397cc167c663e10a5949aba1203c4b418453439c3d262a27d99b67566bee3670"} {"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9676d579cca15e5ec9176a94c5ba41363d966d7914b23cc604c3f4c79bd0e64f"} {"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7741e9081fa1de9f74671ff15d36b58bd29e114bb3e5068ee49d5a5e1df3fe37"} {"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d978cdde3c832c380457accd40d214a201d56015203f4007dfc2ee8bc1d4c940"} {"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f70f5db466e2db483f2f3ae0261b4a66dc8802e7f461608243249c96e24204b2"} {"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a6f6c5a25d9e7419c282c5a657e6fa9bdc9c383e9d93f8b9df7c0c69c7da86f"} {"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3c3697d41f93dfa277255119283e481479ffa05c2e853fa27983af421bfdb79"} {"level":"info","ts":"2026-07-24T00:55:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085073c8b0e05f41e51e2aa899009330ba85e9e9d81fc86a0ff908c3ff2a05f8"} {"level":"info","ts":"2026-07-24T00:55:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/926c772c615947d4ed0eaaf541667b3763211dc125fd0cc0aced3fd1f564f82e"} {"level":"info","ts":"2026-07-24T00:55:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ad41e2422e030faa85c411c4d37fb6a6eac682b20337153c0891b198deb75e"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/858b6a501f21195413abf39e75b0bd5eff1d7faeec8f543d8be60d3daa8ad613"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffe70e932b69fe2f554256b6fdeb3ad9e88567bc31236893d51f5c7b1ec7f19c"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f644fedc03cf8026ec7fb5d23a4787c167c1677ac6075d708fd3b29d76c9891c"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da66f754c806305022d4b94bdd3b009e7d7f9b475b7ff24e1b7b79aab896bc61"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1347d5a145cc4edf7d7e6d0e8c588d2e61786383e33416d2e65717ab628c7ee4"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec"} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec"} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec"} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"} {"level":"debug","ts":"2026-07-24T00:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df"} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/799c21c6387f4efb004c863b0a5a06cca994ca7195dc1267fcd9d945956831da"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/947db794ed5e8d249d7b60b8af3af8d2d08bee312b69cdfc8a13cf928b3df264"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e5731815fa7bae021706d9e8d3e48343b604d45e7de718d6498f376ca11490"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2868a5d76b96fa5cfcf339a5df3c04ed28115ac8945b88d768a085ea6ac315d7"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f5212c11f8d6580e4c3baaff7f8c1ff3a03e4ca235ff3db24f2b09b9514922"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"799c21c6387f4efb004c863b0a5a06cca994ca7195dc1267fcd9d945956831da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["799c21c6387f4efb004c863b0a5a06cca994ca7195dc1267fcd9d945956831da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"799c21c6387f4efb004c863b0a5a06cca994ca7195dc1267fcd9d945956831da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"947db794ed5e8d249d7b60b8af3af8d2d08bee312b69cdfc8a13cf928b3df264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["947db794ed5e8d249d7b60b8af3af8d2d08bee312b69cdfc8a13cf928b3df264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"947db794ed5e8d249d7b60b8af3af8d2d08bee312b69cdfc8a13cf928b3df264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/799c21c6387f4efb004c863b0a5a06cca994ca7195dc1267fcd9d945956831da"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e5731815fa7bae021706d9e8d3e48343b604d45e7de718d6498f376ca11490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e5731815fa7bae021706d9e8d3e48343b604d45e7de718d6498f376ca11490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/947db794ed5e8d249d7b60b8af3af8d2d08bee312b69cdfc8a13cf928b3df264"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e5731815fa7bae021706d9e8d3e48343b604d45e7de718d6498f376ca11490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e5731815fa7bae021706d9e8d3e48343b604d45e7de718d6498f376ca11490"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2868a5d76b96fa5cfcf339a5df3c04ed28115ac8945b88d768a085ea6ac315d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2868a5d76b96fa5cfcf339a5df3c04ed28115ac8945b88d768a085ea6ac315d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2868a5d76b96fa5cfcf339a5df3c04ed28115ac8945b88d768a085ea6ac315d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2868a5d76b96fa5cfcf339a5df3c04ed28115ac8945b88d768a085ea6ac315d7"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f5212c11f8d6580e4c3baaff7f8c1ff3a03e4ca235ff3db24f2b09b9514922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f5212c11f8d6580e4c3baaff7f8c1ff3a03e4ca235ff3db24f2b09b9514922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f5212c11f8d6580e4c3baaff7f8c1ff3a03e4ca235ff3db24f2b09b9514922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"799c21c6387f4efb004c863b0a5a06cca994ca7195dc1267fcd9d945956831da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"947db794ed5e8d249d7b60b8af3af8d2d08bee312b69cdfc8a13cf928b3df264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e5731815fa7bae021706d9e8d3e48343b604d45e7de718d6498f376ca11490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2868a5d76b96fa5cfcf339a5df3c04ed28115ac8945b88d768a085ea6ac315d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f5212c11f8d6580e4c3baaff7f8c1ff3a03e4ca235ff3db24f2b09b9514922","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f5212c11f8d6580e4c3baaff7f8c1ff3a03e4ca235ff3db24f2b09b9514922"} {"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34178","PortSpecifier":{"PortValue":34178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34178","PortSpecifier":{"PortValue":34178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854581,"nanos":560775068},"http":{"id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44268","PortSpecifier":{"PortValue":44268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44268","PortSpecifier":{"PortValue":44268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854581,"nanos":612836328},"http":{"id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34184","PortSpecifier":{"PortValue":34184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34184","PortSpecifier":{"PortValue":34184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854581,"nanos":654150476},"http":{"id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN\"}"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","subscription":"e2e-rate-iso-a-7bbe67","tenant":"e2e-shared-a-44952a","userId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-7bbe67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7bbe67"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","selected_subscription":"e2e-rate-iso-a-7bbe67","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-7bbe67@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34190","PortSpecifier":{"PortValue":34190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56825fb7-67c6-4343-a204-8302ad39cd4c","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34190","PortSpecifier":{"PortValue":34190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854582,"nanos":741616029},"http":{"id":"56825fb7-67c6-4343-a204-8302ad39cd4c","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN"} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN\"}"} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","subscription":"e2e-rate-iso-a-7bbe67","tenant":"e2e-shared-a-44952a","userId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-7bbe67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7bbe67"} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","selected_subscription":"e2e-rate-iso-a-7bbe67","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-7bbe67@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71c66702-3711-43c6-a812-845026121fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34206","PortSpecifier":{"PortValue":34206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71c66702-3711-43c6-a812-845026121fef","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71c66702-3711-43c6-a812-845026121fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34206","PortSpecifier":{"PortValue":34206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854583,"nanos":783737251},"http":{"id":"71c66702-3711-43c6-a812-845026121fef","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN"} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71c66702-3711-43c6-a812-845026121fef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN\"}"} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","subscription":"e2e-rate-iso-a-7bbe67","tenant":"e2e-shared-a-44952a","userId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71c66702-3711-43c6-a812-845026121fef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-7bbe67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71c66702-3711-43c6-a812-845026121fef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7bbe67"} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","selected_subscription":"e2e-rate-iso-a-7bbe67","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-7bbe67@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71c66702-3711-43c6-a812-845026121fef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71c66702-3711-43c6-a812-845026121fef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45664","PortSpecifier":{"PortValue":45664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45664","PortSpecifier":{"PortValue":45664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854596,"nanos":844472514},"http":{"id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854596,"nanos":882694985},"http":{"id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45676","PortSpecifier":{"PortValue":45676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"526b3d60-f0b5-4b91-a136-bdc56e331686","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45676","PortSpecifier":{"PortValue":45676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854596,"nanos":915001499},"http":{"id":"526b3d60-f0b5-4b91-a136-bdc56e331686","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG\"}"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","subscription":"e2e-rate-iso-a-c4b064","tenant":"e2e-shared-a-44952a","userId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-c4b064\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4b064"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","selected_subscription":"e2e-rate-iso-a-c4b064","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-c4b064@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854597,"nanos":954292775},"http":{"id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG"} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG\"}"} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","subscription":"e2e-rate-iso-a-c4b064","tenant":"e2e-shared-a-44952a","userId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-c4b064\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4b064"} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","selected_subscription":"e2e-rate-iso-a-c4b064","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-c4b064@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45696","PortSpecifier":{"PortValue":45696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ab24208-5624-408f-be2a-828f02a6ea3b","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45696","PortSpecifier":{"PortValue":45696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854598,"nanos":995171724},"http":{"id":"6ab24208-5624-408f-be2a-828f02a6ea3b","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG"} {"level":"debug","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG\"}"} {"level":"debug","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","subscription":"e2e-rate-iso-a-c4b064","tenant":"e2e-shared-a-44952a","userId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-c4b064\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4b064"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","selected_subscription":"e2e-rate-iso-a-c4b064","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-c4b064@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45786","PortSpecifier":{"PortValue":45786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","method":"POST","path":"/ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b/v1/completions","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45786","PortSpecifier":{"PortValue":45786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854599,"nanos":26712922},"http":{"id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GL64T5Ys5rpZLULz_DwiduKorOY1bZduT12jQ2PYZUPfDCUlAU3vN5NahBpQ"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GL64T5Ys5rpZLULz_DwiduKorOY1bZduT12jQ2PYZUPfDCUlAU3vN5NahBpQ\"}"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"372f3231-69f4-457c-b912-1d3097e2188a","keyName":"e2e-rate-b-c4b064","subscription":"e2e-rate-iso-b-c4b064","tenant":"e2e-shared-b-91a75b","userId":"372f3231-69f4-457c-b912-1d3097e2188a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b\",\"requestedSubscription\":\"e2e-rate-iso-b-c4b064\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-91a75b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4b064","namespace":"ai-tenant-e2e-shared-b-91a75b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b"}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c4b064"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"372f3231-69f4-457c-b912-1d3097e2188a","keyName":"e2e-rate-b-c4b064","selected_subscription":"e2e-rate-iso-b-c4b064","selected_subscription_key":"ai-tenant-e2e-shared-b-91a75b/e2e-rate-iso-b-c4b064@ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-91a75b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4b064","namespace":"ai-tenant-e2e-shared-b-91a75b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"} {"level":"info","ts":"2026-07-24T00:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"} {"level":"info","ts":"2026-07-24T00:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/947db794ed5e8d249d7b60b8af3af8d2d08bee312b69cdfc8a13cf928b3df264"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/799c21c6387f4efb004c863b0a5a06cca994ca7195dc1267fcd9d945956831da"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2868a5d76b96fa5cfcf339a5df3c04ed28115ac8945b88d768a085ea6ac315d7"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80f5212c11f8d6580e4c3baaff7f8c1ff3a03e4ca235ff3db24f2b09b9514922"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15e5731815fa7bae021706d9e8d3e48343b604d45e7de718d6498f376ca11490"} {"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb"} {"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40584","PortSpecifier":{"PortValue":40584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.19:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6a108bf-a5bb-410b-93d4-baa244ada496","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40584","PortSpecifier":{"PortValue":40584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.19:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854662,"nanos":630568680},"http":{"id":"f6a108bf-a5bb-410b-93d4-baa244ada496","method":"POST","headers":{":authority":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.19:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40590","PortSpecifier":{"PortValue":40590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.19:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40590","PortSpecifier":{"PortValue":40590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.19:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854662,"nanos":710505052},"http":{"id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","method":"POST","headers":{":authority":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VSVVJX4RCgOOAgXE_Ge3cgNLW0JsvhjJM3yFNNCIfoqAswJd0VUBRtx1VIYN"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VSVVJX4RCgOOAgXE_Ge3cgNLW0JsvhjJM3yFNNCIfoqAswJd0VUBRtx1VIYN\"}"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"42d1ab09-9dd0-45f8-aa05-15cb5a6e9b00","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"42d1ab09-9dd0-45f8-aa05-15cb5a6e9b00","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.19:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"42d1ab09-9dd0-45f8-aa05-15cb5a6e9b00","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"} {"level":"error","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"} {"level":"error","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"} {"level":"info","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38006","PortSpecifier":{"PortValue":38006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38006","PortSpecifier":{"PortValue":38006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854707,"nanos":618598300},"http":{"id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","method":"POST","headers":{":authority":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-193ff5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38012","PortSpecifier":{"PortValue":38012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","method":"POST","path":"/ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5/v1/chat/completions","host":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38012","PortSpecifier":{"PortValue":38012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854709,"nanos":684272015},"http":{"id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","method":"POST","headers":{":authority":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HuSwEhRLrXgy6qq5_GDhOGpjuWlbLzgBb2S1ru3NOIOpUyKRLRVIM68ALnWM"} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-193ff5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HuSwEhRLrXgy6qq5_GDhOGpjuWlbLzgBb2S1ru3NOIOpUyKRLRVIM68ALnWM\"}"} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-193ff5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5923c0ac-50c6-4d74-b3ff-1773ecf79d72","keyName":"e2e-ipp-193ff5","subscription":"ipp-route-193ff5-sub","tenant":"e2e-ipp-a-193ff5","userId":"5923c0ac-50c6-4d74-b3ff-1773ecf79d72","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-193ff5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5\",\"requestedSubscription\":\"ipp-route-193ff5-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-193ff5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-193ff5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-193ff5-sub","namespace":"ai-tenant-e2e-ipp-a-193ff5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5"}} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-193ff5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-193ff5-sub"} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5923c0ac-50c6-4d74-b3ff-1773ecf79d72","keyName":"e2e-ipp-193ff5","selected_subscription":"ipp-route-193ff5-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5-sub@ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-193ff5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-193ff5-sub","namespace":"ai-tenant-e2e-ipp-a-193ff5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"} {"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"} {"level":"info","ts":"2026-07-24T00:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}