--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7557d20f9c8cc3b84370925e421676d69ebc2ae5448454fe430e558d4e77aaf"} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7557d20f9c8cc3b84370925e421676d69ebc2ae5448454fe430e558d4e77aaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7557d20f9c8cc3b84370925e421676d69ebc2ae5448454fe430e558d4e77aaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7557d20f9c8cc3b84370925e421676d69ebc2ae5448454fe430e558d4e77aaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7557d20f9c8cc3b84370925e421676d69ebc2ae5448454fe430e558d4e77aaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7557d20f9c8cc3b84370925e421676d69ebc2ae5448454fe430e558d4e77aaf"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e"} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4"} {"level":"info","ts":"2026-07-16T05:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8"} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"} {"level":"error","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"error","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"error","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d"} {"level":"error","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe"} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"info","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"info","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e856ba-9119-445b-835b-089696cbb762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53542","PortSpecifier":{"PortValue":53542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39e856ba-9119-445b-835b-089696cbb762","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e856ba-9119-445b-835b-089696cbb762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53542","PortSpecifier":{"PortValue":53542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178795,"nanos":665985921},"http":{"id":"39e856ba-9119-445b-835b-089696cbb762","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39e856ba-9119-445b-835b-089696cbb762","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39e856ba-9119-445b-835b-089696cbb762","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39e856ba-9119-445b-835b-089696cbb762","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e856ba-9119-445b-835b-089696cbb762","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e856ba-9119-445b-835b-089696cbb762","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e856ba-9119-445b-835b-089696cbb762","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39e856ba-9119-445b-835b-089696cbb762","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e856ba-9119-445b-835b-089696cbb762","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e856ba-9119-445b-835b-089696cbb762","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e856ba-9119-445b-835b-089696cbb762","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e856ba-9119-445b-835b-089696cbb762","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77b88a78-0dca-4004-bf53-9330733516f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44378","PortSpecifier":{"PortValue":44378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77b88a78-0dca-4004-bf53-9330733516f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77b88a78-0dca-4004-bf53-9330733516f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44378","PortSpecifier":{"PortValue":44378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178795,"nanos":727316817},"http":{"id":"77b88a78-0dca-4004-bf53-9330733516f9","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77b88a78-0dca-4004-bf53-9330733516f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77b88a78-0dca-4004-bf53-9330733516f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77b88a78-0dca-4004-bf53-9330733516f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77b88a78-0dca-4004-bf53-9330733516f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77b88a78-0dca-4004-bf53-9330733516f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77b88a78-0dca-4004-bf53-9330733516f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77b88a78-0dca-4004-bf53-9330733516f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77b88a78-0dca-4004-bf53-9330733516f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77b88a78-0dca-4004-bf53-9330733516f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77b88a78-0dca-4004-bf53-9330733516f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77b88a78-0dca-4004-bf53-9330733516f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53558","PortSpecifier":{"PortValue":53558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2985fc31-f989-4b50-8c94-3422b80fb87d","method":"GET","path":"/maas-api/v1/api-keys/b898cad0-49c2-4433-8abd-012af1519eb2","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53558","PortSpecifier":{"PortValue":53558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178795,"nanos":785283076},"http":{"id":"2985fc31-f989-4b50-8c94-3422b80fb87d","method":"GET","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b898cad0-49c2-4433-8abd-012af1519eb2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b898cad0-49c2-4433-8abd-012af1519eb2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2985fc31-f989-4b50-8c94-3422b80fb87d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44386","PortSpecifier":{"PortValue":44386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","method":"GET","path":"/maas-api/v1/api-keys/0910ecab-0e75-425a-8496-0f08c4dee561","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44386","PortSpecifier":{"PortValue":44386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178795,"nanos":817561205},"http":{"id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","method":"GET","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0910ecab-0e75-425a-8496-0f08c4dee561",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0910ecab-0e75-425a-8496-0f08c4dee561",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b55f72c5-4874-4dc3-9b32-8cf7dde4344c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33566","PortSpecifier":{"PortValue":33566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32f02dc5-834b-4085-8ab9-cbc789a05814","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33566","PortSpecifier":{"PortValue":33566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178813,"nanos":21115898},"http":{"id":"32f02dc5-834b-4085-8ab9-cbc789a05814","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32f02dc5-834b-4085-8ab9-cbc789a05814","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54364","PortSpecifier":{"PortValue":54364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54792a08-55fb-4378-a932-1ab55aac5bb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54364","PortSpecifier":{"PortValue":54364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178813,"nanos":52279693},"http":{"id":"54792a08-55fb-4378-a932-1ab55aac5bb3","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54792a08-55fb-4378-a932-1ab55aac5bb3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33574","PortSpecifier":{"PortValue":33574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33574","PortSpecifier":{"PortValue":33574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178813,"nanos":106618533},"http":{"id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","method":"GET","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ko6KIg8dJcI6pGLl_9aMJHyqEAi8XIYqaBWC3C9aEFYFSstQBlZdk98yHNVr"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ko6KIg8dJcI6pGLl_9aMJHyqEAi8XIYqaBWC3C9aEFYFSstQBlZdk98yHNVr\"}"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dab1419d-82c7-49e2-a181-05a936b640ac","keyName":"e2e-auth-iso-a-d7d97f","subscription":"e2e-auth-iso-e4aaae","tenant":"e2e-shared-a-a01a82","userId":"dab1419d-82c7-49e2-a181-05a936b640ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e4aaae"} {"level":"info","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6dadc05-cd62-4640-bacb-64ccd581b9f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38166","PortSpecifier":{"PortValue":38166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38166","PortSpecifier":{"PortValue":38166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178828,"nanos":176812762},"http":{"id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb40acc0-b86c-4afb-80db-e33ec2b381a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56982","PortSpecifier":{"PortValue":56982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56982","PortSpecifier":{"PortValue":56982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178828,"nanos":211610005},"http":{"id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5665043-a03a-4c7b-bfe6-3c21369999c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56992","PortSpecifier":{"PortValue":56992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56992","PortSpecifier":{"PortValue":56992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178828,"nanos":250041201},"http":{"id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","method":"GET","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yAo4p3PgmdV0yBBo_dEaduj3370TfwPnBmg6PsydzASZt5qgLmgS5PLjCiFr"} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yAo4p3PgmdV0yBBo_dEaduj3370TfwPnBmg6PsydzASZt5qgLmgS5PLjCiFr\"}"} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T05:13:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f07992e0-e7ff-441a-9860-b9cf5803cb02","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55796","PortSpecifier":{"PortValue":55796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55796","PortSpecifier":{"PortValue":55796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178847,"nanos":558086754},"http":{"id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"159e699b-82d8-443e-9c72-3dfcf92d28a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56312","PortSpecifier":{"PortValue":56312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56312","PortSpecifier":{"PortValue":56312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178847,"nanos":593066403},"http":{"id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd1e07fc-9c30-42bd-8cac-08afb9e13102","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55810","PortSpecifier":{"PortValue":55810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55810","PortSpecifier":{"PortValue":55810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178847,"nanos":626695843},"http":{"id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c495ac-4d72-40e6-af6a-fbaf18e6880b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"117b8e99-6736-422f-9617-43d519c11259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56316","PortSpecifier":{"PortValue":56316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"117b8e99-6736-422f-9617-43d519c11259","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"117b8e99-6736-422f-9617-43d519c11259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56316","PortSpecifier":{"PortValue":56316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178847,"nanos":661255229},"http":{"id":"117b8e99-6736-422f-9617-43d519c11259","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"117b8e99-6736-422f-9617-43d519c11259","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"117b8e99-6736-422f-9617-43d519c11259","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"117b8e99-6736-422f-9617-43d519c11259","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117b8e99-6736-422f-9617-43d519c11259","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117b8e99-6736-422f-9617-43d519c11259","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117b8e99-6736-422f-9617-43d519c11259","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"117b8e99-6736-422f-9617-43d519c11259","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117b8e99-6736-422f-9617-43d519c11259","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117b8e99-6736-422f-9617-43d519c11259","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"117b8e99-6736-422f-9617-43d519c11259","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"117b8e99-6736-422f-9617-43d519c11259","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53532","PortSpecifier":{"PortValue":53532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7978440d-f5fa-4d6c-b315-35fdade1d645","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53532","PortSpecifier":{"PortValue":53532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178864,"nanos":935723810},"http":{"id":"7978440d-f5fa-4d6c-b315-35fdade1d645","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7978440d-f5fa-4d6c-b315-35fdade1d645","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41788","PortSpecifier":{"PortValue":41788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"357ce2ac-97df-4b79-87dd-729aaff8f286","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41788","PortSpecifier":{"PortValue":41788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178864,"nanos":978891674},"http":{"id":"357ce2ac-97df-4b79-87dd-729aaff8f286","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"357ce2ac-97df-4b79-87dd-729aaff8f286","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f538896-6899-4e44-84e8-92f2e7649c05","method":"GET","path":"/maas-api/v1/api-keys/a7ccff30-18b1-43fc-a80c-430f885d1534","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178865,"nanos":10809434},"http":{"id":"0f538896-6899-4e44-84e8-92f2e7649c05","method":"GET","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7ccff30-18b1-43fc-a80c-430f885d1534",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7ccff30-18b1-43fc-a80c-430f885d1534",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f538896-6899-4e44-84e8-92f2e7649c05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84ffe687-5e65-4466-962e-cca43562f49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53536","PortSpecifier":{"PortValue":53536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84ffe687-5e65-4466-962e-cca43562f49a","method":"GET","path":"/maas-api/v1/api-keys/a7ccff30-18b1-43fc-a80c-430f885d1534","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84ffe687-5e65-4466-962e-cca43562f49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53536","PortSpecifier":{"PortValue":53536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178865,"nanos":39967721},"http":{"id":"84ffe687-5e65-4466-962e-cca43562f49a","method":"GET","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7ccff30-18b1-43fc-a80c-430f885d1534",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84ffe687-5e65-4466-962e-cca43562f49a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84ffe687-5e65-4466-962e-cca43562f49a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84ffe687-5e65-4466-962e-cca43562f49a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7ccff30-18b1-43fc-a80c-430f885d1534",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84ffe687-5e65-4466-962e-cca43562f49a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84ffe687-5e65-4466-962e-cca43562f49a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84ffe687-5e65-4466-962e-cca43562f49a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84ffe687-5e65-4466-962e-cca43562f49a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84ffe687-5e65-4466-962e-cca43562f49a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84ffe687-5e65-4466-962e-cca43562f49a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84ffe687-5e65-4466-962e-cca43562f49a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84ffe687-5e65-4466-962e-cca43562f49a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42198","PortSpecifier":{"PortValue":42198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42198","PortSpecifier":{"PortValue":42198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178878,"nanos":32295497},"http":{"id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8a0185b-7fcf-4567-b5d4-1d97aafa7192","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14595d99-aea2-469d-bc88-63fe0428e513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38396","PortSpecifier":{"PortValue":38396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14595d99-aea2-469d-bc88-63fe0428e513","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14595d99-aea2-469d-bc88-63fe0428e513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38396","PortSpecifier":{"PortValue":38396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178878,"nanos":65190944},"http":{"id":"14595d99-aea2-469d-bc88-63fe0428e513","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14595d99-aea2-469d-bc88-63fe0428e513","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14595d99-aea2-469d-bc88-63fe0428e513","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14595d99-aea2-469d-bc88-63fe0428e513","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14595d99-aea2-469d-bc88-63fe0428e513","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14595d99-aea2-469d-bc88-63fe0428e513","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14595d99-aea2-469d-bc88-63fe0428e513","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/auth-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14595d99-aea2-469d-bc88-63fe0428e513","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14595d99-aea2-469d-bc88-63fe0428e513","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14595d99-aea2-469d-bc88-63fe0428e513","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14595d99-aea2-469d-bc88-63fe0428e513","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14595d99-aea2-469d-bc88-63fe0428e513","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72be02b4-43fd-4580-9570-3efbc45206be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42206","PortSpecifier":{"PortValue":42206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72be02b4-43fd-4580-9570-3efbc45206be","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72be02b4-43fd-4580-9570-3efbc45206be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42206","PortSpecifier":{"PortValue":42206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178878,"nanos":102144205},"http":{"id":"72be02b4-43fd-4580-9570-3efbc45206be","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QbMbqOERjXe4EtCS_wCNxVNIHWAESssXaRZvoCCODfAX3atGyNyYqXW8kzyb"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QbMbqOERjXe4EtCS_wCNxVNIHWAESssXaRZvoCCODfAX3atGyNyYqXW8kzyb\"}"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e957344d-a017-4f0c-8907-1a0e33490317","keyName":"e2e-auth-iso-a-83e967","subscription":"e2e-auth-iso-d8f074","tenant":"e2e-shared-a-a01a82","userId":"e957344d-a017-4f0c-8907-1a0e33490317","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72be02b4-43fd-4580-9570-3efbc45206be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/auth-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d8f074"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72be02b4-43fd-4580-9570-3efbc45206be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72be02b4-43fd-4580-9570-3efbc45206be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:14:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72be02b4-43fd-4580-9570-3efbc45206be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5df04162e650cb8522c4ea8c7e9bc69c59a08c26b1180ebcebe8218c9d50d4d"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec8ee39a767b2211fb1eb8cfe32ceb941eaac3289c1ef84991b74a2fc91b85f3"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ecfa83abf857f7531e42d70aab301e1e1b36e1b4872ca38356bd9da8d152e16"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f78238615dcd5dc56a7953a65fe9a316c54509540f81c1157ea9184253598da"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7557d20f9c8cc3b84370925e421676d69ebc2ae5448454fe430e558d4e77aaf"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9a5ee5c7e4217d0a10275d0ab573279336ba8071247aec06d1a0df14df13689"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd320f3a699e95f39409c7911f6a6c38aeaf62a378ab0da2df8de63627e0c651"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afac71a62d6e0e737750b47c07a0d183665a6c33865ce6d8be305f0a2d29c2fe"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a2f00a98b254bf2757c660056f6cae6bf4d7ccf2a8e6c261644e40615ee39d4"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/963d4716176f2d1cccb11d155c41e8a0d118e0f17a71ab02ed69bd0b23d95d8f"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/816f8d695910f2f3834159349b9b7e377663bbd3cc0481364326bdbd9455eeea"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/684e2ac8c15c2a113dbcd96dfe853c2d04b9c1e270373fd817977e6278f53b6a"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d780b5dec7267336886054cac9ccab032f0bdeff49b6065e6a7ba53c24a7693"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfc91f931a043bf5aa9d3e1fd4ceef768bd6aef9a692564469eb3b1d8406605e"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9b5689f4c586e9cdfc2e4b6f2908524df8ced0e6436744ed6300f870bc315df"} {"level":"info","ts":"2026-07-16T05:14:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcc381d0525538cf64fed0b20ff5a8fc048d52df82968aeed6d6878bbfadcb6"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"error","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990"} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990"} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990"} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561"} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561"} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990"} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561"} {"level":"debug","ts":"2026-07-16T05:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"debug","ts":"2026-07-16T05:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"debug","ts":"2026-07-16T05:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5"} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"debug","ts":"2026-07-16T05:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"debug","ts":"2026-07-16T05:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8"} {"level":"info","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"error","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"error","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"error","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"error","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c"} {"level":"error","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"error","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5"} {"level":"debug","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561"} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e"} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990"} {"level":"info","ts":"2026-07-16T05:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"info","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42740","PortSpecifier":{"PortValue":42740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42740","PortSpecifier":{"PortValue":42740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178946,"nanos":612577695},"http":{"id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/sub-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"923984aa-10b0-4ac8-aec8-0df0860e7aec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2ee9840-be78-4401-b931-35efb9a51522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47254","PortSpecifier":{"PortValue":47254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2ee9840-be78-4401-b931-35efb9a51522","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2ee9840-be78-4401-b931-35efb9a51522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47254","PortSpecifier":{"PortValue":47254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178946,"nanos":650229104},"http":{"id":"e2ee9840-be78-4401-b931-35efb9a51522","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2ee9840-be78-4401-b931-35efb9a51522","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2ee9840-be78-4401-b931-35efb9a51522","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2ee9840-be78-4401-b931-35efb9a51522","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ee9840-be78-4401-b931-35efb9a51522","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ee9840-be78-4401-b931-35efb9a51522","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ee9840-be78-4401-b931-35efb9a51522","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/sub-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2ee9840-be78-4401-b931-35efb9a51522","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ee9840-be78-4401-b931-35efb9a51522","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ee9840-be78-4401-b931-35efb9a51522","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2ee9840-be78-4401-b931-35efb9a51522","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2ee9840-be78-4401-b931-35efb9a51522","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42742","PortSpecifier":{"PortValue":42742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42742","PortSpecifier":{"PortValue":42742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178946,"nanos":685982037},"http":{"id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","method":"GET","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mP42BBUKsdlxFY7k_Ybn45rcfvFuXDWCfaNpOwhXZRMEZdTeACOF6UwzIOFn"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mP42BBUKsdlxFY7k_Ybn45rcfvFuXDWCfaNpOwhXZRMEZdTeACOF6UwzIOFn\"}"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f62d6340-ca04-43ab-b328-1f7fb3ffa56d","keyName":"e2e-sub-iso-598202","subscription":"e2e-a-only-025524","tenant":"e2e-shared-a-a01a82","userId":"f62d6340-ca04-43ab-b328-1f7fb3ffa56d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/sub-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-025524"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d9cdfa2-c44a-4ad4-b132-f462b85f3f03","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47258","PortSpecifier":{"PortValue":47258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47258","PortSpecifier":{"PortValue":47258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178946,"nanos":723770807},"http":{"id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","method":"GET","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o30iRaEyqGdRJkVv_957fDizKLSYN4r21zzWYpyL4REbM1QSuaAyjU8keaua"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o30iRaEyqGdRJkVv_957fDizKLSYN4r21zzWYpyL4REbM1QSuaAyjU8keaua\"}"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6e3803d-b249-4028-957b-637d82f86f92","keyName":"e2e-sub-iso-7778cb","subscription":"e2e-b-only-025524","tenant":"e2e-shared-b-12efc5","userId":"d6e3803d-b249-4028-957b-637d82f86f92","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/sub-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-025524"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9d57b64-c1d1-4e3e-b8cb-4e43419cfbf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53114","PortSpecifier":{"PortValue":53114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53114","PortSpecifier":{"PortValue":53114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178964,"nanos":60166502},"http":{"id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/sub-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"384acd9f-0fab-4828-8186-6bbb07fd5f78","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54158","PortSpecifier":{"PortValue":54158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54158","PortSpecifier":{"PortValue":54158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178964,"nanos":94131514},"http":{"id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/sub-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"388b68f1-3dd6-481f-a9f4-e6676dfc4fe8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53126","PortSpecifier":{"PortValue":53126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53126","PortSpecifier":{"PortValue":53126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178964,"nanos":124901123},"http":{"id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EkFJddRQFpeD1F4t_c7vbgJQRrALU1hzE0QVKEjsodzkAHDa1CbxuutTEG5C"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EkFJddRQFpeD1F4t_c7vbgJQRrALU1hzE0QVKEjsodzkAHDa1CbxuutTEG5C\"}"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b51eaad-d1b2-41fe-9e9a-6700fb32e296","keyName":"e2e-sub-iso-fdc580","subscription":"e2e-shared-sub-3aaa9d","tenant":"e2e-shared-a-a01a82","userId":"8b51eaad-d1b2-41fe-9e9a-6700fb32e296","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/sub-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3aaa9d"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bc8aa8d-ef18-4f57-9954-8c6f800f56b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54164","PortSpecifier":{"PortValue":54164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75f76675-8db8-4600-8726-3c1b4db6871c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54164","PortSpecifier":{"PortValue":54164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784178964,"nanos":162700744},"http":{"id":"75f76675-8db8-4600-8726-3c1b4db6871c","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VLv57DQZXZcFojVU_y3vMMxelt8MV64NU4dkbB2BQFDoYUmmLXkKQiPYSEBt"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VLv57DQZXZcFojVU_y3vMMxelt8MV64NU4dkbB2BQFDoYUmmLXkKQiPYSEBt\"}"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ed0ba21-4a13-410f-87eb-b18f040a7182","keyName":"e2e-sub-iso-f51a43","subscription":"e2e-shared-sub-3aaa9d","tenant":"e2e-shared-b-12efc5","userId":"6ed0ba21-4a13-410f-87eb-b18f040a7182","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/sub-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3aaa9d"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:16:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75f76675-8db8-4600-8726-3c1b4db6871c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8eb62ae14d5620d734c468b39b505bbb685a9b0826d9d3e14af27c86aceb5e3c"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/232921005a635ffa8f42837ad3a298cba918ede2e93fb9e7bbdfc827c9e599d0"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f41aaccd14440314c9c6287c7b65e74f945116264c8c42221261d725854ba9b"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34020a7008933c8ee214407b5133a80e176245279d0b9f3aea4af271978f08a5"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff45b9a2ab2bc0ad02fa7c7ed8da9c15c31bedc0056df1bf3aa18a5dd0c82561"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8af0a1f0b69c0a3734ff137db337a6c555b15290545b92b8976667147882b54"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42e9f5f25d78d19d31d63e839da2d485b9ab4f707a8d0fdc690a92a73bb10212"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1dc9c51c1fba56c104c723e6e4854ff9c6d5588e90251e4e87b2c8b7663a8f58"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7418a49b39b5d771151d844ee16c0f9883aceb84486a8ad84d941e013d9c81a5"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e2920c83d243062cdc7f6bd3a6672845b5a8fc3c8437c6e3cc48467fcd92b36"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74d3ac1165ec4d2c0ccdca72a88fd14f79f145b0bbcd54d4882b47862e400554"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63febb1c54f734892d90c4dda879f8d88223702c367cec95c8f5b056a7c41215"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8911808482c2a033f962c5aba46db73bcf0f0991ae57d54f7d82daeffee9d90"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d734839540e10fe507cd7eb3ead1f752870386b4a28c0fe456ad869a7a95c77"} {"level":"info","ts":"2026-07-16T05:16:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aebf3188ac2bf8e9f9a2f498b511995429108af62ec4879e485fda68562b1e5f"} {"level":"info","ts":"2026-07-16T05:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fb1a201361e6abdde39fbe800e0682225cb23c28ebe93cc6e8e6f040f405990"} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce"} {"level":"debug","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce"} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce"} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011"} {"level":"error","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"} {"level":"error","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a"} {"level":"error","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"} {"level":"info","ts":"2026-07-16T05:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"debug","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8"} {"level":"info","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7"} {"level":"error","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"info","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa"} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa"} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"info","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"error","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T05:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95"} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011"} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7"} {"level":"debug","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"debug","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"debug","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a"} {"level":"debug","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa"} {"level":"debug","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e"} {"level":"debug","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"} {"level":"debug","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c"} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"info","ts":"2026-07-16T05:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"info","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57048","PortSpecifier":{"PortValue":57048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57048","PortSpecifier":{"PortValue":57048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179026,"nanos":794587588},"http":{"id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcdd35c8-8c4b-4237-b770-d2ce436b53cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58986","PortSpecifier":{"PortValue":58986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58986","PortSpecifier":{"PortValue":58986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179026,"nanos":833398742},"http":{"id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/rate-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16aa3bc7-bef4-40bf-a58b-3ac8168107f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57052","PortSpecifier":{"PortValue":57052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","method":"POST","path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57052","PortSpecifier":{"PortValue":57052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179026,"nanos":867350758},"http":{"id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fHycpzXtEveriXXy_9BhEBSiHo15my0tpiuHzqicKFIWmf9gFOLU587iStpB"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fHycpzXtEveriXXy_9BhEBSiHo15my0tpiuHzqicKFIWmf9gFOLU587iStpB\"}"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"979ee15a-b1ee-4921-b15b-a32b0c096953","keyName":"e2e-rate-a-2a36bd","subscription":"e2e-rate-iso-a-2a36bd","tenant":"e2e-shared-a-a01a82","userId":"979ee15a-b1ee-4921-b15b-a32b0c096953","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\",\"requestedSubscription\":\"e2e-rate-iso-a-2a36bd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2a36bd","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2a36bd"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"979ee15a-b1ee-4921-b15b-a32b0c096953","keyName":"e2e-rate-a-2a36bd","selected_subscription":"e2e-rate-iso-a-2a36bd","selected_subscription_key":"ai-tenant-e2e-shared-a-a01a82/e2e-rate-iso-a-2a36bd@ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2a36bd","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"946be3ea-0bf8-46c2-bb7e-16854af75fca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57068","PortSpecifier":{"PortValue":57068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d71ea0da-454f-44d2-8f23-4907057c468c","method":"POST","path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57068","PortSpecifier":{"PortValue":57068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179027,"nanos":930339889},"http":{"id":"d71ea0da-454f-44d2-8f23-4907057c468c","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fHycpzXtEveriXXy_9BhEBSiHo15my0tpiuHzqicKFIWmf9gFOLU587iStpB"} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fHycpzXtEveriXXy_9BhEBSiHo15my0tpiuHzqicKFIWmf9gFOLU587iStpB\"}"} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"979ee15a-b1ee-4921-b15b-a32b0c096953","keyName":"e2e-rate-a-2a36bd","subscription":"e2e-rate-iso-a-2a36bd","tenant":"e2e-shared-a-a01a82","userId":"979ee15a-b1ee-4921-b15b-a32b0c096953","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\",\"requestedSubscription\":\"e2e-rate-iso-a-2a36bd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2a36bd","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2a36bd"} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"979ee15a-b1ee-4921-b15b-a32b0c096953","keyName":"e2e-rate-a-2a36bd","selected_subscription":"e2e-rate-iso-a-2a36bd","selected_subscription_key":"ai-tenant-e2e-shared-a-a01a82/e2e-rate-iso-a-2a36bd@ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2a36bd","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d71ea0da-454f-44d2-8f23-4907057c468c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57080","PortSpecifier":{"PortValue":57080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eba9260b-adf3-4538-bfe0-fadf07c57005","method":"POST","path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57080","PortSpecifier":{"PortValue":57080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179028,"nanos":964258815},"http":{"id":"eba9260b-adf3-4538-bfe0-fadf07c57005","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fHycpzXtEveriXXy_9BhEBSiHo15my0tpiuHzqicKFIWmf9gFOLU587iStpB"} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fHycpzXtEveriXXy_9BhEBSiHo15my0tpiuHzqicKFIWmf9gFOLU587iStpB\"}"} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"979ee15a-b1ee-4921-b15b-a32b0c096953","keyName":"e2e-rate-a-2a36bd","subscription":"e2e-rate-iso-a-2a36bd","tenant":"e2e-shared-a-a01a82","userId":"979ee15a-b1ee-4921-b15b-a32b0c096953","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\",\"requestedSubscription\":\"e2e-rate-iso-a-2a36bd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2a36bd","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2a36bd"} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"979ee15a-b1ee-4921-b15b-a32b0c096953","keyName":"e2e-rate-a-2a36bd","selected_subscription":"e2e-rate-iso-a-2a36bd","selected_subscription_key":"ai-tenant-e2e-shared-a-a01a82/e2e-rate-iso-a-2a36bd@ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2a36bd","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eba9260b-adf3-4538-bfe0-fadf07c57005","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51734","PortSpecifier":{"PortValue":51734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6698c1b6-3828-447f-95fb-a615315e4f07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51734","PortSpecifier":{"PortValue":51734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179041,"nanos":784586530},"http":{"id":"6698c1b6-3828-447f-95fb-a615315e4f07","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6698c1b6-3828-447f-95fb-a615315e4f07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49358","PortSpecifier":{"PortValue":49358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49358","PortSpecifier":{"PortValue":49358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179041,"nanos":822732533},"http":{"id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"]}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4303ecf5577f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc96b998-b429-433b-b9ad-c7d22af87e87"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"973a5530-0739-4f3c-bafa-ac82201f4bdb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/rate-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ba4a409-60fe-431d-8d0b-676e5ab59608","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94016290-a3e4-44de-b736-7677c49e7b54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51740","PortSpecifier":{"PortValue":51740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94016290-a3e4-44de-b736-7677c49e7b54","method":"POST","path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94016290-a3e4-44de-b736-7677c49e7b54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51740","PortSpecifier":{"PortValue":51740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179041,"nanos":858272718},"http":{"id":"94016290-a3e4-44de-b736-7677c49e7b54","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cDmvWO2hzcEGcAU2_MWW43UfZ8VKJxSLc4f1EyvnwqudqS0EuMdOqFmOBVMw"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cDmvWO2hzcEGcAU2_MWW43UfZ8VKJxSLc4f1EyvnwqudqS0EuMdOqFmOBVMw\"}"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a804df6-19be-4061-a687-2d9837dd9e33","keyName":"e2e-rate-a-9b7e08","subscription":"e2e-rate-iso-a-9b7e08","tenant":"e2e-shared-a-a01a82","userId":"6a804df6-19be-4061-a687-2d9837dd9e33","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\",\"requestedSubscription\":\"e2e-rate-iso-a-9b7e08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b7e08","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94016290-a3e4-44de-b736-7677c49e7b54","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9b7e08"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94016290-a3e4-44de-b736-7677c49e7b54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6a804df6-19be-4061-a687-2d9837dd9e33","keyName":"e2e-rate-a-9b7e08","selected_subscription":"e2e-rate-iso-a-9b7e08","selected_subscription_key":"ai-tenant-e2e-shared-a-a01a82/e2e-rate-iso-a-9b7e08@ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b7e08","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94016290-a3e4-44de-b736-7677c49e7b54","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94016290-a3e4-44de-b736-7677c49e7b54","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52120","PortSpecifier":{"PortValue":52120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","method":"POST","path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52120","PortSpecifier":{"PortValue":52120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179042,"nanos":900136651},"http":{"id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cDmvWO2hzcEGcAU2_MWW43UfZ8VKJxSLc4f1EyvnwqudqS0EuMdOqFmOBVMw"} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cDmvWO2hzcEGcAU2_MWW43UfZ8VKJxSLc4f1EyvnwqudqS0EuMdOqFmOBVMw\"}"} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a804df6-19be-4061-a687-2d9837dd9e33","keyName":"e2e-rate-a-9b7e08","subscription":"e2e-rate-iso-a-9b7e08","tenant":"e2e-shared-a-a01a82","userId":"6a804df6-19be-4061-a687-2d9837dd9e33","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\",\"requestedSubscription\":\"e2e-rate-iso-a-9b7e08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b7e08","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9b7e08"} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6a804df6-19be-4061-a687-2d9837dd9e33","keyName":"e2e-rate-a-9b7e08","selected_subscription":"e2e-rate-iso-a-9b7e08","selected_subscription_key":"ai-tenant-e2e-shared-a-a01a82/e2e-rate-iso-a-9b7e08@ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b7e08","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"563f917a-d88c-4e4d-a4dd-3b79733a651a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52134","PortSpecifier":{"PortValue":52134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","method":"POST","path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions","host":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52134","PortSpecifier":{"PortValue":52134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179043,"nanos":961667915},"http":{"id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","method":"POST","headers":{":authority":"e2e-shared-a-a01a82.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cDmvWO2hzcEGcAU2_MWW43UfZ8VKJxSLc4f1EyvnwqudqS0EuMdOqFmOBVMw"} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cDmvWO2hzcEGcAU2_MWW43UfZ8VKJxSLc4f1EyvnwqudqS0EuMdOqFmOBVMw\"}"} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a804df6-19be-4061-a687-2d9837dd9e33","keyName":"e2e-rate-a-9b7e08","subscription":"e2e-rate-iso-a-9b7e08","tenant":"e2e-shared-a-a01a82","userId":"6a804df6-19be-4061-a687-2d9837dd9e33","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\",\"requestedSubscription\":\"e2e-rate-iso-a-9b7e08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a01a82.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b7e08","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a01a82/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9b7e08"} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6a804df6-19be-4061-a687-2d9837dd9e33","keyName":"e2e-rate-a-9b7e08","selected_subscription":"e2e-rate-iso-a-9b7e08","selected_subscription_key":"ai-tenant-e2e-shared-a-a01a82/e2e-rate-iso-a-9b7e08@ai-tenant-e2e-shared-a-a01a82/rate-test-model-a01a82","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a01a82","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b7e08","namespace":"ai-tenant-e2e-shared-a-a01a82","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd7e31b5-6b23-4000-92a9-e80c9b62ea25","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38898","PortSpecifier":{"PortValue":38898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","method":"POST","path":"/ai-tenant-e2e-shared-b-12efc5/rate-test-model-12efc5/v1/completions","host":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38898","PortSpecifier":{"PortValue":38898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784179043,"nanos":993869131},"http":{"id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","method":"POST","headers":{":authority":"e2e-shared-b-12efc5.apps.2746fbb5-4ca9-4063-b091-4303ecf5577f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-12efc5/rate-test-model-12efc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16bNDdxl4SrKcstFu_tJgUKuPIOaTAzdUxWjQXmfHbPhWCKA1Ym916J6lBnp1"} {"level":"debug","ts":"2026-07-16T05:17:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16bNDdxl4SrKcstFu_tJgUKuPIOaTAzdUxWjQXmfHbPhWCKA1Ym916J6lBnp1\"}"} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"709ae7bb-99e7-4492-922f-a0abe33c3b80","keyName":"e2e-rate-b-9b7e08","subscription":"e2e-rate-iso-b-9b7e08","tenant":"e2e-shared-b-12efc5","userId":"709ae7bb-99e7-4492-922f-a0abe33c3b80","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-12efc5/rate-test-model-12efc5\",\"requestedSubscription\":\"e2e-rate-iso-b-9b7e08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-12efc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-12efc5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9b7e08","namespace":"ai-tenant-e2e-shared-b-12efc5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-12efc5/rate-test-model-12efc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-12efc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9b7e08"} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"709ae7bb-99e7-4492-922f-a0abe33c3b80","keyName":"e2e-rate-b-9b7e08","selected_subscription":"e2e-rate-iso-b-9b7e08","selected_subscription_key":"ai-tenant-e2e-shared-b-12efc5/e2e-rate-iso-b-9b7e08@ai-tenant-e2e-shared-b-12efc5/rate-test-model-12efc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-12efc5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9b7e08","namespace":"ai-tenant-e2e-shared-b-12efc5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T05:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21bd5ae7-65fc-45b4-a27e-3c9379211159","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T05:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37776adbd836c3310c27360ff888dd2c9f2ad3690af4470d318325f544406c32"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58aea789a260b626da0177bdbacedcd7ef12112df27f4f0516d81453826769ea"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b498eac3c3c9e4660dea65c4041869c99b3b1776c4909d5402c0fa0f02ef3dce"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6454f792454da4ca1e0d822013b5a1dde3efe021168da182bba74f7b4721011"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/249f86960378fd17fde7cf1a51a32a4f4a8b883af9db01b13599337ef42049ce"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23cdf74fb3eff657ff1968d76373d83ed02a9479bdf2015563f958ef3f4ecbcd"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fac289633a595ea51a1a403499f1a961dc222097a5e347935755b05c73c624c0"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2ce5033ab417cae6f23abb2242091fb1eae2ad24524358276493f8a34d5eb95"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2061a47e0f0deddd157c76ffefb69461431dacb52e49236bec07b2f75626823a"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de892fb2be8110abe58e9463e025531018343872c0473241e5debde62e44595a"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594215c2e4b1ab761978b957b10746c5fdc7042126db1d212de0f961d242060f"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bba39088b54137966bbcb6ed82e9a49e42d4d1640bd81051a66389dfb4aa326"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4cbd6ab6e31b932bf2ae828048d8613af21c1bd11b6d319504284e1a333d1a8"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55b1de31e93274dd3600c98d39457f8d022d457625365821347b51a8dd9ad2fa"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/440e164126572e1a3ebcb4b7bb9d3951cab60e757da0aeeb24bb343e1fc9fff7"} {"level":"info","ts":"2026-07-16T05:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/772d952fb6b7adabbd8581b160320c161722d7ea42bb9da0cff5517dd9281638"} {"level":"info","ts":"2026-07-16T05:17:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67233a9789fa6254d3297420942d050ac5bad357e81ecd59caccba3a918039af"} {"level":"info","ts":"2026-07-16T05:17:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e86e4534e246f48a5f23eba8355c3f7f2fdde2de4df627e59fcd0e86b5b8ca5"} {"level":"info","ts":"2026-07-16T05:17:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd732ea65214734fcaef2056252fe383e718d4d1cbd2a1dc31a33e86766773c8"} {"level":"info","ts":"2026-07-16T05:17:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5b2a54f24cb6f5affc0c8f1596e427d9b103ec37920181563f252158d60289d"} {"level":"info","ts":"2026-07-16T05:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12db2260e2b3f309171b5b48865683dece73ce4c2cbad08e53d36b45fb82fa92"} {"level":"info","ts":"2026-07-16T05:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aef2c75cea99e0ec835e8f66fa12cc24f9ae0dc1c72f1b77a13e913c8f2d969c"} {"level":"info","ts":"2026-07-16T05:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84c2586a1ed8e8c9eabd00a2d0a8339c0da51078fb58103ce23220e7efc1eba2"} {"level":"info","ts":"2026-07-16T05:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74fc69f68611cbcacae318298d7d75056432bf90d8b3c4ab99fcd4ed3bf6947e"}