--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"error","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"error","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1188e243-b415-469d-b894-68be3ecda4b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43468","PortSpecifier":{"PortValue":43468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1188e243-b415-469d-b894-68be3ecda4b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1188e243-b415-469d-b894-68be3ecda4b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43468","PortSpecifier":{"PortValue":43468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923638,"nanos":667921300},"http":{"id":"1188e243-b415-469d-b894-68be3ecda4b9","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1188e243-b415-469d-b894-68be3ecda4b9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1188e243-b415-469d-b894-68be3ecda4b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1188e243-b415-469d-b894-68be3ecda4b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1188e243-b415-469d-b894-68be3ecda4b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1188e243-b415-469d-b894-68be3ecda4b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1188e243-b415-469d-b894-68be3ecda4b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/auth-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1188e243-b415-469d-b894-68be3ecda4b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1188e243-b415-469d-b894-68be3ecda4b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1188e243-b415-469d-b894-68be3ecda4b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1188e243-b415-469d-b894-68be3ecda4b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1188e243-b415-469d-b894-68be3ecda4b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923638,"nanos":700840799},"http":{"id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/auth-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0695e6d-45bc-9b27-b54e-ab27225f9329","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43474","PortSpecifier":{"PortValue":43474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43474","PortSpecifier":{"PortValue":43474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923638,"nanos":770360153},"http":{"id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/auth-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fd8cd2b-b3a7-49f8-b70f-cb43ef966605","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8d149c9-07b9-4827-be29-2d74a0863df9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923638,"nanos":818829222},"http":{"id":"d8d149c9-07b9-4827-be29-2d74a0863df9","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/auth-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8d149c9-07b9-4827-be29-2d74a0863df9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"error","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"error","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48490","PortSpecifier":{"PortValue":48490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48490","PortSpecifier":{"PortValue":48490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923658,"nanos":192095071},"http":{"id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/auth-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe164ddf-d303-4ee2-82b1-eabdb9e0fbf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50502","PortSpecifier":{"PortValue":50502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50502","PortSpecifier":{"PortValue":50502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923658,"nanos":228565397},"http":{"id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/auth-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8af84a82-82a4-48f2-ab4f-875c575f08d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50516","PortSpecifier":{"PortValue":50516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","method":"GET","path":"/maas-api/v1/api-keys/eff6f287-f366-4c77-8850-8315cce70425","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50516","PortSpecifier":{"PortValue":50516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923658,"nanos":270228372},"http":{"id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","method":"GET","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eff6f287-f366-4c77-8850-8315cce70425",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eff6f287-f366-4c77-8850-8315cce70425",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/auth-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdaa78f8-5edf-48dc-9c28-1faec3d958f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48504","PortSpecifier":{"PortValue":48504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa970af5-9946-454f-9df6-0f447baf63a8","method":"GET","path":"/maas-api/v1/api-keys/eff6f287-f366-4c77-8850-8315cce70425","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48504","PortSpecifier":{"PortValue":48504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923658,"nanos":306304764},"http":{"id":"aa970af5-9946-454f-9df6-0f447baf63a8","method":"GET","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eff6f287-f366-4c77-8850-8315cce70425",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eff6f287-f366-4c77-8850-8315cce70425",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/auth-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa970af5-9946-454f-9df6-0f447baf63a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"info","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41682","PortSpecifier":{"PortValue":41682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41682","PortSpecifier":{"PortValue":41682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923676,"nanos":364836369},"http":{"id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/auth-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa37b1c2-e76e-4c21-9fbe-c5647cab1663","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"530330eb-5263-48dd-a78f-125777146e93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59112","PortSpecifier":{"PortValue":59112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"530330eb-5263-48dd-a78f-125777146e93","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"530330eb-5263-48dd-a78f-125777146e93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59112","PortSpecifier":{"PortValue":59112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923676,"nanos":402090105},"http":{"id":"530330eb-5263-48dd-a78f-125777146e93","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"530330eb-5263-48dd-a78f-125777146e93","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"530330eb-5263-48dd-a78f-125777146e93","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"530330eb-5263-48dd-a78f-125777146e93","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"530330eb-5263-48dd-a78f-125777146e93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"530330eb-5263-48dd-a78f-125777146e93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"530330eb-5263-48dd-a78f-125777146e93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/auth-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"530330eb-5263-48dd-a78f-125777146e93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"530330eb-5263-48dd-a78f-125777146e93","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"530330eb-5263-48dd-a78f-125777146e93","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"530330eb-5263-48dd-a78f-125777146e93","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"530330eb-5263-48dd-a78f-125777146e93","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41694","PortSpecifier":{"PortValue":41694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41694","PortSpecifier":{"PortValue":41694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923676,"nanos":438999559},"http":{"id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kVTcx61otZmkit7I_sVkcT2IE6bfL7UnMFoEQQRlP3Q8luULUVRFW8d5bFDS"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kVTcx61otZmkit7I_sVkcT2IE6bfL7UnMFoEQQRlP3Q8luULUVRFW8d5bFDS\"}"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"499fb09e-b1ff-4cd4-a606-7a189bd0c242","keyName":"e2e-auth-iso-a-302a9e","subscription":"e2e-auth-iso-bb7b96","tenant":"e2e-shared-a-8abb86","userId":"499fb09e-b1ff-4cd4-a606-7a189bd0c242","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/auth-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-bb7b96"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:07:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70e28f8-80de-4d17-9428-da9d9e1b9e81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/889e704dff4921133e0be8b27201961d8e7765cda90bd78e3bcec6325ba7373f"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48f57526c63b560e1aa3a15304543340d2d0e1cb35aba3fdfd49f7bdcc418fa3"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed0ad3a05b12c2fa2c6d4dfd75229356b3a59b916282f76108987e0701330c37"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9a46cf009b38566b4db5e16fad06d4f1ccb99f9e6d3f70dac0aca8ac4fcdd51"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd56e8452126ecd20cda8d3cb4ae0562353c76ac8ce180bdcd8340c6efb9f9b1"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b342ba704699a34d0253f9e2f8c830d23fa33f3c37c4d26e55fb3fd5e39274b1"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda4b58077f5b7a42e1301d85bb00e6160c6bf9f3ebaa51de715779c0d186f1b"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec25cc6e9c142da0eb2ee6968b38b322abdc26d5f54225d411e53f1a84f53507"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/829eb0c0aeb6929680286c03d1b50c5a7d11d18ba8288e3e6c823a742d6d06f8"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8459689fbf9805c226dd98c49b82dd20ae27e2bbed9337ae7267291ce4e93943"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0f42839159fabd73045570a58a716712993f2a2ee0999cb41e034fbdf45e0f7"} {"level":"info","ts":"2026-07-24T20:08:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ab3e6fe8ba63e803f4db2b2fef5ef1e5d8477586ba6a7c6bd71a5b3c9dfdf29"} {"level":"info","ts":"2026-07-24T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f94c3a644988c568b3ad3d4a96cf4b9da79557fb9a8bee6155f3dc7dc65bb409"} {"level":"info","ts":"2026-07-24T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eedf3590cfbd76769c2e49fa56e315911b6b86f9808580ceda02da63f2edae35"} {"level":"info","ts":"2026-07-24T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92f7729613c14e26a2d3c4b6f627baff789d6ac8a12f60b9dbe7d54ab621f8e3"} {"level":"info","ts":"2026-07-24T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b77f9884506a6697e3fa1e7d95af7758a25c66458c4bc665fa69d9b11934eed"} {"level":"debug","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f"} {"level":"info","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf"} {"level":"debug","ts":"2026-07-24T20:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf"} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf"} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6"} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a297ee5f82c71298d6986540442f655b5e9b09ffde24514f8bf1a895f2536271"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a297ee5f82c71298d6986540442f655b5e9b09ffde24514f8bf1a895f2536271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a297ee5f82c71298d6986540442f655b5e9b09ffde24514f8bf1a895f2536271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d0fe593d56ab9edea8d1193a90a3b1683f71ed92e083141fd375ed0a7cdd46"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a297ee5f82c71298d6986540442f655b5e9b09ffde24514f8bf1a895f2536271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d0fe593d56ab9edea8d1193a90a3b1683f71ed92e083141fd375ed0a7cdd46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d0fe593d56ab9edea8d1193a90a3b1683f71ed92e083141fd375ed0a7cdd46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a297ee5f82c71298d6986540442f655b5e9b09ffde24514f8bf1a895f2536271"} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f"} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d0fe593d56ab9edea8d1193a90a3b1683f71ed92e083141fd375ed0a7cdd46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d0fe593d56ab9edea8d1193a90a3b1683f71ed92e083141fd375ed0a7cdd46"} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1"} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a297ee5f82c71298d6986540442f655b5e9b09ffde24514f8bf1a895f2536271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d0fe593d56ab9edea8d1193a90a3b1683f71ed92e083141fd375ed0a7cdd46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38786","PortSpecifier":{"PortValue":38786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38786","PortSpecifier":{"PortValue":38786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923738,"nanos":348286355},"http":{"id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/sub-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b7cbc3a-d27e-4b78-ac1d-99395a5f0096","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58d8945f-a933-4704-85d6-c5941f01a806","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39720","PortSpecifier":{"PortValue":39720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58d8945f-a933-4704-85d6-c5941f01a806","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58d8945f-a933-4704-85d6-c5941f01a806","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39720","PortSpecifier":{"PortValue":39720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923738,"nanos":390691939},"http":{"id":"58d8945f-a933-4704-85d6-c5941f01a806","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58d8945f-a933-4704-85d6-c5941f01a806","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58d8945f-a933-4704-85d6-c5941f01a806","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58d8945f-a933-4704-85d6-c5941f01a806","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58d8945f-a933-4704-85d6-c5941f01a806","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58d8945f-a933-4704-85d6-c5941f01a806","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58d8945f-a933-4704-85d6-c5941f01a806","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/sub-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58d8945f-a933-4704-85d6-c5941f01a806","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58d8945f-a933-4704-85d6-c5941f01a806","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58d8945f-a933-4704-85d6-c5941f01a806","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58d8945f-a933-4704-85d6-c5941f01a806","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58d8945f-a933-4704-85d6-c5941f01a806","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41486642-1add-4541-b0c9-5966322135b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38790","PortSpecifier":{"PortValue":38790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41486642-1add-4541-b0c9-5966322135b1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41486642-1add-4541-b0c9-5966322135b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38790","PortSpecifier":{"PortValue":38790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923738,"nanos":433466161},"http":{"id":"41486642-1add-4541-b0c9-5966322135b1","method":"GET","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Uv3HNDsTmBw5PsRD_vPu0A9y7xNVwzAinS50bfbr5RWuDF4myRwa40TPVx01"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41486642-1add-4541-b0c9-5966322135b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Uv3HNDsTmBw5PsRD_vPu0A9y7xNVwzAinS50bfbr5RWuDF4myRwa40TPVx01\"}"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4fd3949-5941-49c0-b26d-1fe872eabe87","keyName":"e2e-sub-iso-9d5546","subscription":"e2e-a-only-e04b93","tenant":"e2e-shared-a-8abb86","userId":"a4fd3949-5941-49c0-b26d-1fe872eabe87","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41486642-1add-4541-b0c9-5966322135b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/sub-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e04b93"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41486642-1add-4541-b0c9-5966322135b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41486642-1add-4541-b0c9-5966322135b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41486642-1add-4541-b0c9-5966322135b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39728","PortSpecifier":{"PortValue":39728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39728","PortSpecifier":{"PortValue":39728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923738,"nanos":473647512},"http":{"id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","method":"GET","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16UMym49McZAtloFi_gTEeYwyVYttxryIsFhcFqm25ve2n3AWDIN4uTDghHq5"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16UMym49McZAtloFi_gTEeYwyVYttxryIsFhcFqm25ve2n3AWDIN4uTDghHq5\"}"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8a73701-3ec6-44a9-8600-60956eb128f0","keyName":"e2e-sub-iso-bda5fe","subscription":"e2e-b-only-e04b93","tenant":"e2e-shared-b-3e15b4","userId":"f8a73701-3ec6-44a9-8600-60956eb128f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/sub-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e04b93"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:08:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb860906-bc85-4c72-9d7f-05b5c90d61b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39474","PortSpecifier":{"PortValue":39474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d780fe45-41d6-46e4-8a7e-f48d13531280","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39474","PortSpecifier":{"PortValue":39474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923748,"nanos":591669413},"http":{"id":"d780fe45-41d6-46e4-8a7e-f48d13531280","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/sub-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d780fe45-41d6-46e4-8a7e-f48d13531280","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45486","PortSpecifier":{"PortValue":45486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff618559-c6e3-4aad-bb47-8560421dd417","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45486","PortSpecifier":{"PortValue":45486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923748,"nanos":631248686},"http":{"id":"ff618559-c6e3-4aad-bb47-8560421dd417","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/sub-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff618559-c6e3-4aad-bb47-8560421dd417","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39484","PortSpecifier":{"PortValue":39484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39484","PortSpecifier":{"PortValue":39484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923748,"nanos":668655624},"http":{"id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZphFLdqEMvM421zu_wjgDOYZuqEX7hnYIaZT4MCF5xctX3P5mjwRHZY6nYJ5"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZphFLdqEMvM421zu_wjgDOYZuqEX7hnYIaZT4MCF5xctX3P5mjwRHZY6nYJ5\"}"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1ee0619f-7840-43d7-b5fd-10a405c8294a","keyName":"e2e-sub-iso-ff1830","subscription":"e2e-shared-sub-1433c8","tenant":"e2e-shared-a-8abb86","userId":"1ee0619f-7840-43d7-b5fd-10a405c8294a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/sub-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1433c8"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e8212c4-0e7e-4e54-af0b-c4cab77f1d62","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45496","PortSpecifier":{"PortValue":45496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45496","PortSpecifier":{"PortValue":45496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923748,"nanos":720699989},"http":{"id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JIoZENLN9IljEyXc_oXb1nWuhgarWsD0MLCUKUuwP6iwc6MnoBSmqinqcz0i"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JIoZENLN9IljEyXc_oXb1nWuhgarWsD0MLCUKUuwP6iwc6MnoBSmqinqcz0i\"}"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e782ffe-498b-4dbf-a73e-e90b372bee7a","keyName":"e2e-sub-iso-83bf9e","subscription":"e2e-shared-sub-1433c8","tenant":"e2e-shared-b-3e15b4","userId":"9e782ffe-498b-4dbf-a73e-e90b372bee7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/sub-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1433c8"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f36e7cc-8872-4840-9ad0-621cb829f73e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3507588a81b122234978b753f246101f51cd37ed1626468e4706c74ce49175f"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81d0fe593d56ab9edea8d1193a90a3b1683f71ed92e083141fd375ed0a7cdd46"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/986b97cfd98fe41cc9c3d87347435592dfc40b94012bc93b9ec3c19b11d2d1fc"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c422246caf5778278898cf398b572898305b96502a5d7ad5bb5ed8178acccdc6"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5bda6b052cfdf9e44371c01f45ac3f50b4ef04a84678cc7534cd0530026dcad"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e0bb8f1becfd04b245fb6f05b599dd30f78cdaad0d0b89d86558d0a61fbe53b"} {"level":"info","ts":"2026-07-24T20:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a8682354fc1e6df39d7532594b517d24d5fbcec83fc2281bbf002f5181227d7"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75dd471a70b489d8cd2e2b83289c89c945da7587fb09f855d04ae4516e1888cf"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5754d248e74ef82a0973f49eeccbaa34d20e5d95ca520f8b9d2ea3b55fc0db0e"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a297ee5f82c71298d6986540442f655b5e9b09ffde24514f8bf1a895f2536271"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e8d38f8600fb7d467676167fe1832632b6f38cdcc8654e5a1c023f4ff09408e"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92035d78d88ba8ad890ebb8ba6ea5cae7c672dbcf5e2f4089c6305699993cbe7"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b2a399265526ea5fcc1cfdbbfd3c8c90b7cf92f3f320d64c2565a46e3edd36f"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ddb600f16c19114e34834ebd6525dc5777e9363cecd7cd5fa1cf66f6dab169"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff25a72dd036285381a02f3fa83d84ac059fa7b01e855473024d5e3ec5341fe1"} {"level":"info","ts":"2026-07-24T20:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd30f6890a8f33f39f54e58e04e54e99989b1e4d481b00f0f355499e14369c15"} {"level":"debug","ts":"2026-07-24T20:10:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"info","ts":"2026-07-24T20:10:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"error","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"error","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"} {"level":"error","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"error","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3"} {"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29"} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"} {"level":"error","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35814","PortSpecifier":{"PortValue":35814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35814","PortSpecifier":{"PortValue":35814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923814,"nanos":51921228},"http":{"id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50868","PortSpecifier":{"PortValue":50868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50868","PortSpecifier":{"PortValue":50868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923814,"nanos":92817855},"http":{"id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35816","PortSpecifier":{"PortValue":35816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35816","PortSpecifier":{"PortValue":35816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923814,"nanos":134754112},"http":{"id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm\"}"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","subscription":"e2e-rate-iso-a-b29ed7","tenant":"e2e-shared-a-8abb86","userId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-b29ed7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b29ed7"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","selected_subscription":"e2e-rate-iso-a-b29ed7","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-b29ed7@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35822","PortSpecifier":{"PortValue":35822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35822","PortSpecifier":{"PortValue":35822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923815,"nanos":221604420},"http":{"id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm"} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm\"}"} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","subscription":"e2e-rate-iso-a-b29ed7","tenant":"e2e-shared-a-8abb86","userId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-b29ed7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b29ed7"} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","selected_subscription":"e2e-rate-iso-a-b29ed7","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-b29ed7@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35826","PortSpecifier":{"PortValue":35826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35826","PortSpecifier":{"PortValue":35826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923816,"nanos":260647208},"http":{"id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm"} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm\"}"} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","subscription":"e2e-rate-iso-a-b29ed7","tenant":"e2e-shared-a-8abb86","userId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-b29ed7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b29ed7"} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","selected_subscription":"e2e-rate-iso-a-b29ed7","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-b29ed7@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52976","PortSpecifier":{"PortValue":52976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52976","PortSpecifier":{"PortValue":52976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923827,"nanos":158052846},"http":{"id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41714","PortSpecifier":{"PortValue":41714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41714","PortSpecifier":{"PortValue":41714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923827,"nanos":196365627},"http":{"id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bef6547c-c09e-4486-a5a5-32c183029623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52988","PortSpecifier":{"PortValue":52988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bef6547c-c09e-4486-a5a5-32c183029623","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bef6547c-c09e-4486-a5a5-32c183029623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52988","PortSpecifier":{"PortValue":52988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923827,"nanos":232502505},"http":{"id":"bef6547c-c09e-4486-a5a5-32c183029623","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN\"}"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","subscription":"e2e-rate-iso-a-abb57e","tenant":"e2e-shared-a-8abb86","userId":"202b3c68-0d76-4cc2-9e71-312effc621cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-abb57e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bef6547c-c09e-4486-a5a5-32c183029623","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abb57e"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","selected_subscription":"e2e-rate-iso-a-abb57e","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-abb57e@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bef6547c-c09e-4486-a5a5-32c183029623","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bef6547c-c09e-4486-a5a5-32c183029623","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53004","PortSpecifier":{"PortValue":53004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53004","PortSpecifier":{"PortValue":53004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923828,"nanos":279060100},"http":{"id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN"} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN\"}"} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","subscription":"e2e-rate-iso-a-abb57e","tenant":"e2e-shared-a-8abb86","userId":"202b3c68-0d76-4cc2-9e71-312effc621cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-abb57e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abb57e"} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","selected_subscription":"e2e-rate-iso-a-abb57e","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-abb57e@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48220","PortSpecifier":{"PortValue":48220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"deed63fd-2e2b-4ea8-942c-586beecdead4","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48220","PortSpecifier":{"PortValue":48220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923829,"nanos":321674825},"http":{"id":"deed63fd-2e2b-4ea8-942c-586beecdead4","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN\"}"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","subscription":"e2e-rate-iso-a-abb57e","tenant":"e2e-shared-a-8abb86","userId":"202b3c68-0d76-4cc2-9e71-312effc621cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-abb57e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abb57e"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","selected_subscription":"e2e-rate-iso-a-abb57e","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-abb57e@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57968","PortSpecifier":{"PortValue":57968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdb247f4-084d-4349-9a88-2b705018fd34","method":"POST","path":"/ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4/v1/completions","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57968","PortSpecifier":{"PortValue":57968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923829,"nanos":357002421},"http":{"id":"bdb247f4-084d-4349-9a88-2b705018fd34","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-e1Ci52SUxkIscW0W_fHNhDJcVUhExCPy8KJiNSgg6H1sCYM2nc4UgywsBC1E"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-e1Ci52SUxkIscW0W_fHNhDJcVUhExCPy8KJiNSgg6H1sCYM2nc4UgywsBC1E\"}"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ffc6397b-3075-417c-a8d1-95b0f8d50f3e","keyName":"e2e-rate-b-abb57e","subscription":"e2e-rate-iso-b-abb57e","tenant":"e2e-shared-b-3e15b4","userId":"ffc6397b-3075-417c-a8d1-95b0f8d50f3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4\",\"requestedSubscription\":\"e2e-rate-iso-b-abb57e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3e15b4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-abb57e","namespace":"ai-tenant-e2e-shared-b-3e15b4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4"}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-abb57e"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ffc6397b-3075-417c-a8d1-95b0f8d50f3e","keyName":"e2e-rate-b-abb57e","selected_subscription":"e2e-rate-iso-b-abb57e","selected_subscription_key":"ai-tenant-e2e-shared-b-3e15b4/e2e-rate-iso-b-abb57e@ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3e15b4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-abb57e","namespace":"ai-tenant-e2e-shared-b-3e15b4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836"} {"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8"} {"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3"} {"level":"info","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49214","PortSpecifier":{"PortValue":49214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa393420-0394-4211-91ab-32cffb4cbef5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49214","PortSpecifier":{"PortValue":49214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923906,"nanos":377188281},"http":{"id":"fa393420-0394-4211-91ab-32cffb4cbef5","method":"POST","headers":{":authority":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923906,"nanos":428512351},"http":{"id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","method":"POST","headers":{":authority":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ILFTpaJVmrtaB0aU_IIg3So1Aqcdtt1t6xd0dQdGyM5Od0u274byASftmHe2"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ILFTpaJVmrtaB0aU_IIg3So1Aqcdtt1t6xd0dQdGyM5Od0u274byASftmHe2\"}"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"efe85701-8aaa-42a8-81d9-d5b96bb38e68","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"efe85701-8aaa-42a8-81d9-d5b96bb38e68","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"efe85701-8aaa-42a8-81d9-d5b96bb38e68","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"} {"level":"error","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"} {"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"} {"level":"error","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"} {"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"} {"level":"info","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59026","PortSpecifier":{"PortValue":59026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59026","PortSpecifier":{"PortValue":59026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923971,"nanos":718042727},"http":{"id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","method":"POST","headers":{":authority":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-11ccc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59040","PortSpecifier":{"PortValue":59040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","method":"POST","path":"/ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9/v1/chat/completions","host":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59040","PortSpecifier":{"PortValue":59040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923973,"nanos":784057672},"http":{"id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","method":"POST","headers":{":authority":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KcvRwctWrZP0cwjr_P79RhdxCG3I2Lbloyjjk3CXMaVAQaChynKX7FOpQutg"} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-11ccc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KcvRwctWrZP0cwjr_P79RhdxCG3I2Lbloyjjk3CXMaVAQaChynKX7FOpQutg\"}"} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-11ccc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62571687-df59-410b-bb39-4f6eae3899a9","keyName":"e2e-ipp-11ccc9","subscription":"ipp-route-11ccc9-sub","tenant":"e2e-ipp-a-11ccc9","userId":"62571687-df59-410b-bb39-4f6eae3899a9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-11ccc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9\",\"requestedSubscription\":\"ipp-route-11ccc9-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-11ccc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-11ccc9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-11ccc9-sub","namespace":"ai-tenant-e2e-ipp-a-11ccc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9"}} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-11ccc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-11ccc9-sub"} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62571687-df59-410b-bb39-4f6eae3899a9","keyName":"e2e-ipp-11ccc9","selected_subscription":"ipp-route-11ccc9-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9-sub@ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-11ccc9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-11ccc9-sub","namespace":"ai-tenant-e2e-ipp-a-11ccc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"} {"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"} {"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"} {"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"} {"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"} {"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"} {"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"} {"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"} {"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"} {"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc"} {"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"} {"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"}